Comcast Makes WiFi Motion Sensing a Standard Feature, and the Fine Print Matters
Comcast on Tuesday launched Xfinity Shield, a home protection package that leans heavily on something its gateways can already do: sense when a…
New Mac Malware AmnesiaStealer Lets Attackers Drive a Victim's Logged In Browser
The page looks like GitHub, down to the dark theme and a badge that says the publisher is verified. Where a download button would normally be, it…
Ukraine Raids Shut 94 Scam Call Centers Running Bank and Investment Fraud
Police in Ukraine have shut down 94 call centers that existed for one purpose: phoning people and talking them out of their money. The raids took…
August Patch Tuesday Brings Roughly 400 Fixes and a Windows Zero Day Under Attack
Microsoft's August security release landed on Tuesday with fixes for roughly 400 vulnerabilities. One of them, a flaw in a Windows networking driver…
Valve Warns European Steam Hardware Buyers After Attack on Its Shipping Partner
Valve began emailing customers across Europe on Monday to tell them that delivery details from their Steam hardware orders were probably stolen. The…
Unpatched Metabase Bug Exposed Customer Records at Framework and Tally
An attacker used a previously unknown flaw in Metabase to break into the company's hosted analytics service and copy data belonging to its customers…
AI-Built Ransomware Toolkit Automates Active Directory Recon and EDR Evasion
Cyberattackers have been utilizing AI-generated ransomware attack toolkits. These AI-powered toolkits can automate Active Directory discovery and…
Latest
-
AppSecSearchLeak Flaw Chain Turned Microsoft 365 Copilot Into a Data Theft Tool
A dangerous chain of vulnerabilities called SearchLeak in Microsoft 365 Copilot…
-
AppSecAutoJack Exploit Chain Lets a Web Page Hijack Microsoft AutoGen Studio AI Agents
An exploit chain known as AutoJack in Microsoft's graphical interface called AutoGen…
-
MalwareAryStinger Malware Turns Aging Home Routers Into a Hidden Reconnaissance Network
In terms of functionality (not impact) the AryStinger campaign uses previously unknown…
-
VulnerabilitiesOne-Character Linux Kernel Bug Hands Local Users Root and Container Escape
Researchers at Exodus Intelligence posted an illustrated step-by-step way to do a…
-
CybercrimeOperation Endgame Disrupts SocGholish and Cleans Nearly 15,000 WordPress Sites
Dutch law enforcement agencies working with similar agencies in Germany, Canada and the…
-
CybercrimeOperation Endgame Dismantles Amadey and StealC and Recovers 27 Million Credentials
On Monday, Europol announced that the global law enforcement community, working together…
-
MalwareStealthy Mistic Backdoor Gives Ransomware Brokers Long-Term Network Access
Although the information regarding these events is based upon publicly available sources…
-
VulnerabilitiesNew 7-Zip Flaw (CVE-2026-48095) Enables Code Execution Through Crafted Archives
A new CVE (CVE-2026-48095) in 7-Zip means that malicious archive processing and…
-
BreachesShinyHunters Exploit an Unpatched Oracle PeopleSoft Flaw to Steal Enterprise Data
The exploitation of an unpatched flaw in the Oracle PeopleSoft system by ShinyHunters…
-
IdentityPalo Alto GlobalProtect Authentication Bypass Lets Attackers Open VPN Sessions
CVE-2026-0257 is an "Authentication Bypass" vulnerability in firewalls manufactured by…