How Three Hijacked Country Code Registries Produced Valid Certificates for Google
Control of the registry behind a country's internet domains brings more than the power to redirect websites. In a notice published on October 6…
The 10 Best Antivirus Suites, Ranked
Our editorial team ranked ten security suites on protection, performance, features, and value — with one clear recommendation for most people.
See the Top 10 →
TotalAV
9.6/10
Exceptional
Read our review →
PHP Patches Two Critical Flaws That Let Attackers Run Code on Web Servers
Anyone running a PHP website has an update to install today. On October 21 the PHP project released versions 8.5.12, 8.4.27, 8.3.36 and 8.2.35 to…
Ten Years After Mirai Took Down Dyn, the Botnets Have Moved Into TVs and Cars
At 11:10 UTC on October 21, 2016, the DNS provider Dyn began absorbing a flood of TCP and UDP traffic aimed at port 53 of its managed DNS platform…
Windows 11 24H2 Exits Support for Consumers as Microsoft Sets 2027 Update Deadlines
Home and Pro editions of Windows 11 version 24H2 received their final monthly security update in October 2026. Microsoft's servicing for those…
Ransomware Recovery Firm Accused of Secretly Paying Gangs and Billing Victims Far More
Businesses that hired MonsterCloud were told they were buying an alternative to paying off ransomware gangs. Federal prosecutors in New York say the…
Norway Hands Microsoft Owned Xandr a Record Fine Over Grindr Ad Auctions
More than six years after a complaint was lodged against it, the advertising technology company Xandr has been ordered to pay 92 million Norwegian…
Ledger Ties Drained Wallets to One Malaysian Reseller After Finding a Hardware Implant
Two days after it began looking into reports of emptied wallets in South East Asia, Ledger said on October 11 that every report of an unexpected…
Latest
-
MalwareQuieter DarkSword Variant Steals iPhone Keychains and Crypto Wallet Data on the Device
The iPhone that gave P7 DarkSword away belonged to a customer of the mobile security firm…
-
Cloud & InfraResearchers Find 8,547 Renewable Energy Systems in Europe Open to the Internet
Anyone with a web browser could have opened the control page of a wind turbine somewhere…
-
BreachesIntruders Used a Company's Access to Copy 8.8 Million Danish Civil Register Records
Four out of five people in Denmark's national register, among them many who have died or…
-
CybercrimeRaids Led From Hamburg Take Down KillSec and Seize 110 Terabytes of Stolen Data
By October 1, visitors to KillSec's leak site found a police banner where the gang's list…
-
VulnerabilitiesSuspected AI Agent Breached Dutch Disclosure Group DIVD Through Two Zammad Zero Days
The volunteers who spend their evenings warning strangers about exposed servers have…
-
BreachesPentagon Personnel Agency Tells 3 Million People Their Records Were Stolen
The agency that keeps the United States military's personnel records has begun telling…
-
Cloud & InfraMore Than 16,000 Supabase Apps Were Handing Out Their Own Data
Thousands of apps and websites built on the database service Supabase are leaving their…
-
VulnerabilitiesNetScaler Admins Were Told to Shut Down Before Citrix Explained Why
Over the weekend, administrators who run Citrix NetScaler appliances began getting…
-
BreachesBitget Freezes Withdrawals After More Than 350 Million Dollars Is Stolen
Bitget, one of the larger cryptocurrency exchanges, said on Friday that attackers had…
-
IdentityA Rogue MFA Provider Can Capture Entra Passwords Inside a Normal Login
Multifactor authentication is meant to be the safety net that saves an account even after…