Cybersecurity — TechPulse

I switched from Google Password Manager to Bitwarden, and passwords weren't the reason

Tashreef Shareef MakeUseOf

Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers

info@thehackernews.com (The Hacker News) Internet

Data Broker Radaris Loses Domains in Privacy Fight

BrianKrebs Krebs on Security

Attackers Exploit WooCommerce Wholesale Lead Capture Flaw to Plant PHP Web Shells

info@thehackernews.com (The Hacker News) Internet

A 32-Year-Old Bug Walks into a Telnet Server

McCaulay Hudson Watchtowr.com

I stopped obsessing over special characters and my passwords got stronger

Adaeze Uche MakeUseOf

Agentic AI is increasing the pressure on organizations to reduce cyber risk exposure

Dan Jones TechRadar

Elderly Texas woman gets scammed for $30K — then gets her revenge on massive international scam ring

Carlos Garcia TheBlaze

Iranian hackers use CHOSEN BRICK data-stealing malware to spy on dissidents and journalists

Sinisa Markovic Help Net Security

NCSC and Allies Warn of Iranian Spyware Campaign

Phil Muncaster Infosecurity Magazine

Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists

info@thehackernews.com (The Hacker News) Internet

Who's governing your AI? A trust framework for enterprise agents and models

Robin Birtstone Theregister.com

AI scammers are scouring obituaries to target widows — one lost $7,000 after being told her late husband evaded taxes

Aditi Ganguly Yahoo Entertainment

LG Denies Allegations Its Televisions Are Always Recording

Ty Pendlebury CNET

Attackers hijack HBO Max’s Reddit account for 48-hour malvertising blitz

Sinisa Markovic Help Net Security

Made in China, flying for Britain: Who really knows what’s inside our defense tech?

Daryl Flack TechRadar

China’s state security minister names two US AI models as a cyber threat

Alina Maria Stan The Next Web

7-Zip has a hidden security tool I somehow never noticed

Afam Onyimadu MakeUseOf

Red Heron Exploits Gitea RCE to Compromise 13 Organizations Across Six Countries

info@thehackernews.com (The Hacker News) Internet

whitelist-bypass – WebRTC Tunnels Through Video-Calling Platforms

Darknet Darknet.org.uk

Digital rights advocates urge EU to step in and save encryption from Canada's Bill C-22

Rene Millman TechRadar

Revolut handed customer passports to scammers using a real government email domain

Ana-Maria Stanciuc The Next Web

Retiree, 70, lost over $2,000 in an Amazon impersonation scam. How fraudsters got him ‘hook, line and sinker’

Aditi Ganguly Yahoo Entertainment

Mexican cartel crypto farm seized in mountain raid — 300 GPUs, satellite links, and industrial transformers tapped hydroelectric power

Mark Tyson Tom's Hardware UK

Attackers Use Passkey Phishing to Hijack Microsoft Cloud Accounts and Exfiltrate Data

info@thehackernews.com (The Hacker News) Internet

Rusting an E-scooter (In a Good Way)

Al Williams Hackaday

Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence

Pierluigi Paganini Securityaffairs.com

I set up a self-destruct password on my Galaxy Note, and it exposed why GrapheneOS keeps it locked to their OS

Gregory Gibson MakeUseOf

Hidden crypto farm in Mexican mountains puts spotlight on cartel funding

By Sarah Morland and Daniel Becerril Yahoo Entertainment

Compiler Can Undo Your Security Checks

Davidbombal, Davidb_Admin Davidbombal.com

Tourmaline

Kitploit Kitploit.com

When the Whole Company Adopts AI: What It Does to Your SOC

info@thehackernews.com (The Hacker News) Internet

Researchers link another hacking campaign to OpenAI agents

Maria Deutscher SiliconANGLE News

WhatsApp vs Telegram vs Signal: Which Messaging App Is Actually Best for Privacy in 2026?

Aseem Kishore Online-tech-tips.com

OpenAI agents attacked RubyGems back in May

Simon Willison Simonwillison.net

In supply chain cyberattacks, AI is being used to fight AI

Shefali Kapadia Business Insider

Counterfeit HDDs are flooding the market — here's how to spot one

Tanveer Singh XDA Developers

Claude Used to Automate Exploitation and Data Theft Across Multiple Victims

info@thehackernews.com (The Hacker News) Internet

Stop saving passwords in your browser, use this free tool instead

Digvijay Kumar MakeUseOf

Report Links Pirate IPTV to Hezbollah TV, Calls for U.S. Site-Blocking

Ernesto Van der Sar Torrentfreak.com

Anthropic disrupts bioweapons research efforts, Russian hacking, Chinese Claude misuse

By AJ Vicens and Eduardo Baptista Yahoo Entertainment

Storage infrastructure will underpin post-quantum security

Uwe Kemmer TechRadar

Federal bulletin issued ahead of 9/11 anniversary

Luke Barr Abcnews.com

China-Linked UNC3569 Exploited Sogou Input Method Flaw to Deploy GRAYRABBIT Backdoor

info@thehackernews.com (The Hacker News) Internet

IDScan confirms breach after 153 million driver’s licenses leak on dark web

Sinisa Markovic Help Net Security

Attackers Exploit Critical Cisco FMC Flaw to deploy Qilin ransomware

Pierluigi Paganini Securityaffairs.com

Microsoft patches a record 974 flaws, and two are already under attack

Ana Maria Constantin The Next Web

He Built Products at Beats, Apple and LVMH. Here’s How He Ended Up at a $1.5 Billion Startup That’s Making Your Data Safer.

Sherin Shibu Entrepreneur

'No user data affected' — Surfshark reveals details of September's security incident

Rene Millman TechRadar

Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks

info@thehackernews.com (The Hacker News) Internet

U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto

info@thehackernews.com (The Hacker News) Internet

Android Privacy Settings Are Not Enough: What Your Phone Cannot Remove From the Internet

AndroidGuys AndroidGuys

US intelligence advisory names six Chinese AI firms and lists the US models each one targeted

Alina Maria Stan The Next Web

Mullvad is shutting down its own DNS service because it thinks this free one is better

Hamed Paydarfar MakeUseOf

Singaporean man pleads guilty in US to massive crypto heist

Peter Hoskins - Business reporter BBC News

Researcher Drops New Microsoft Defender PoC Showing ShieldBreak Patch Can Be Bypassed

info@thehackernews.com (The Hacker News) Internet

Microsoft breaks Patch Tuesday record with 974-CVE deluge

Jessica Lyons Theregister.com

How to secure hybrid meeting rooms without sacrificing user experience

Cath Everett Theregister.com

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell

info@thehackernews.com (The Hacker News) Internet

North Korea-linked Hackers Hide a Backdoor Inside HAProxy

Pierluigi Paganini Securityaffairs.com

‘Smart TV That Spies on You Even When It’s Off’ Is My #1 Christmas Gift Item

Jim Vorel Jezebel

Mathspace breach exposes data on over a million students and parents

Sinisa Markovic Help Net Security

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams

info@thehackernews.com (The Hacker News) Internet

Secure temporary file sharing for AI agents and humans

aispace-sh Github.com

Microsoft breaks another patch Tuesday record

Tom Warren The Verge

Cybersecurity jobs available right now: September 8, 2026

Anamarija Pogorelec Help Net Security

Trezor Supply Chain Breach Now Impacts 81,000 Customers

Phil Muncaster Infosecurity Magazine

IT Help Desk Impersonation Lets Hackers Bypass MFA

Pierluigi Paganini Securityaffairs.com

Liquid Network Sidechain Targeted By Alleged White-Hat Hackers

Sterling Ashworth Naturalnews.com

We have a year to fix security everywhere

Your DNS setting matters more in 2026 for reasons beyond speed

Oluwademilade Afolabi MakeUseOf

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts

info@thehackernews.com (The Hacker News) Internet

JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies

info@thehackernews.com (The Hacker News) Internet

Hard-Chat – A serverless, RAM-only P2P terminal chat

mrhardlint Github.com

Researcher Publishes CrowdStrike Privilege Escalation Zero Day

Phil Muncaster Infosecurity Magazine

Attackers spread malware through ScreenConnect file transfers

Sinisa Markovic Help Net Security

Bot Detection Without JavaScript: What My Blog Measured

Goga Koreli Gkoreli.com

State security authority alerts to intelligence leak risks via courier data

John Pike Globalsecurity.org

OpenPetya v2.0.0

Kitploit Kitploit.com

Keep your sensitive PDFs secure with this offline PDF editor for $20 for life

Boing Boing's Shop Boing Boing

OpenAI’s $1 Billion Cyber Push Backs Cloudflare and SentinelOne. Which Has the Better AI Security Model?

Habib Ur Rehman Yahoo Entertainment

Attackers Breached JetBrains Cadence via Unpatched TeamCity, Extracting AWS Credentials

info@thehackernews.com (The Hacker News) Internet

'Call of Duty: Modern Warfare 2' PC remote code exploits have been fixed, says Activision

jez@windowscentral.com (Jez Corden) , Jez Corden Windows Central

OpenAI Agents Hacked Another Website

Lily Hay Newman, Matt Burgess, Dhruv Mehrotra Wired

WordPress Security Plugins: How to Choose the Right One

Sucuri Sucuri.net

Attackers Exploit PaperCut Flaws to Steal Credentials From Schools and Universities

info@thehackernews.com (The Hacker News) Internet

Russian National Extradited Over Malware Campaign Targeting 80,000 Users

Daily Hodl Agent The Daily Hodl

How some grey-market crypto ATMs in Hong Kong can turn users into fraud victims

Eric Jiang, Eric Jiang Post Magazine

Commvault (CVLT) Turns Cyberattacks Into Automated Recovery Through New CrowdStrike (CRWD) Deal

Maham Fatima Yahoo Entertainment

FinCEN ties $13B in crypto scams to non-US operations

Cointelegraph by Turner Wright Cointelegraph

Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws

info@thehackernews.com (The Hacker News) Internet

G7 Urges Fast-Track on Quantum-Safe Cybersecurity Rules

Kevin Poireault Infosecurity Magazine

ID Verification Breach Exposes Millions of Sensitive Identity Documents

Edison Reed Naturalnews.com

Hackers Had A Live Feed Of Every ID This Verification Company Scanned. For Over A Year.

Mike Masnick Techdirt

Thomson Reuters Court Software Breach May Have Exposed SSNs and Sealed Data

info@thehackernews.com (The Hacker News) Internet

A breach at Thomson Reuters reached appellate courts in twelve US jurisdictions

Ana-Maria Stanciuc The Next Web

Face Recognition Is Becoming the Norm for Dating Apps

Jason Parham Wired

Utah becomes the first US state to target VPNs with a strict age verification law, but top providers refuse to budge

chiara.castro@futurenet.com (Chiara Castro) , Chiara Castro TechRadar

Get lifetime ad blocking for your whole family for $11 — sale ends today

DealPost Team PCWorld

CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners

info@thehackernews.com (The Hacker News) Internet

International Operation Disrupts Sality P2P Botnet

Phil Muncaster Infosecurity Magazine

WhatsApp has a major new Android bug that can expose all your private photos — check this permission now

Will McCurdy MakeUseOf

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

info@thehackernews.com (The Hacker News) Internet

More than 153 million drivers licenses on sale after "breach" at identity verification service

Rob Beschizza Boing Boing

Dropbox breach seemingly caused by egregious authentication failure [U]

Ben Lovejoy 9to5Mac

CrowdStrike and the FBI are dismantling Sality after 23 years

Ana-Maria Stanciuc The Next Web

Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands

info@thehackernews.com (The Hacker News) Internet

The hackers protecting America’s water supply

Rachel Feltman, Fonda Mwangi, Alli Rodgers, Alex Sugiura Scientific American

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

info@thehackernews.com (The Hacker News) Internet

Ferry passengers hit by data breach during sailing

Simon Jones; Tanya Gupta - South East BBC News

Meta removes fraud app ads in India, after being asked twice

Ana-Maria Stanciuc The Next Web

Attackers Exploit Critical Langflow and Rails Flaws in Credential-Probing and C2 Activity

info@thehackernews.com (The Hacker News) Internet

Financial Stability Board Sounds the Alarm Over Frontier AI Risks

Phil Muncaster Infosecurity Magazine

[Sponsor] WorkOS: How to Give an Agent a Task Instead of a Token

Daring Fireball Department of Commerce Workos.com

Cybersecurity jobs available right now: September 1, 2026

Sinisa Markovic Help Net Security

EFF to Governor Newsom: Veto California’s AB 1709

Rindala Alajaji EFF

New ClickFix campaign can deploy powerful multi-stage malware directly through Windows Terminal and PowerShell

Sead Fadilpašić TechRadar

Meta removes ads for fraud apps posing as porn after India sounds alarm

By Munsif Vengattil Yahoo Entertainment

Brave’s Browser Hides Your Real Email When You’re Signing Up for Websites

Tyler Graham CNET

Berlin Is Being Blackmailed By Hackers

BeauHD Slashdot.org

Doxxing Safety Pt I: Prevention and Footprint Management

Daly Barnett EFF

Shadow AI is a security problem, but the EU AI Act makes it a legal one

Darren Williams TechRadar

Praetorian – Offensive Security Tools Built Around Portable Go Workflows

Darknet Darknet.org.uk

AI-driven cyber risk is top concern for global financial stability, watchdog says

By Phoebe Seers Yahoo Entertainment

AI-driven cyber attacks are now the top risk to the financial system, the FSB says

Ana-Maria Stanciuc The Next Web

China-Linked Fire Ant Hijacks Cisco Routers to Steal Credentials and Blind Security Logs

info@thehackernews.com (The Hacker News) Internet

Boston Scientific Still Recovering From Cyberattack

Eduard Kovacs Securityweek.com

Microsoft asks users to ignore 'Antivirus is turned off' errors

Sergiu Gatlan BleepingComputer

Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft

Pierluigi Paganini Securityaffairs.com

Top AI tools including Claude, Codex, and Hermes installed suspicious code inside corporate networks

Sead Fadilpašić TechRadar

Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited

Anamarija Pogorelec Help Net Security

WhatsApp's Scam Alert feature is now available to beta users on Android

Sagar GSMArena.com

Security Affairs newsletter Round 592 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

A new browser feature hides which website you're visiting from your ISP, and it has nothing to do with a VPN

Gavin Phillips MakeUseOf

Hasbro Data Breach Exposed Employee Personal Information

Eduard Kovacs Securityweek.com

Brave browser adds email aliases to help users evade tracking

Bill Toulas BleepingComputer

POWBlock is a universal bot/DDoS defense primitive for any server

8Protons Github.com

Warning over fake social media shopping deals

George Torr - East Midlands BBC News

How did the Manchester Airports Group cyberattack take place, and what data was exposed in the 8.7 million customer records? The experts weigh in

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

Her Security System Failed While She Was Away—Then She Ignored the Tech’s Simple Fix to Blame Him Instead

Jayne Elliott Twistedsifter.com

Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator

Pierluigi Paganini Securityaffairs.com

This Week in Security: Android Malware, VOIP Hijack, Signal Contact Discovery, and TeamPCP Arrests

Mike Kershaw Hackaday

19 Chrome and Edge Extensions Found With Wallet-Stealing and Crypto-Draining Code

info@thehackernews.com (The Hacker News) Internet

Tech Companies Call for Improved Cyber Defenses After AI-Enabled Attacks

Alex Valdes CNET

Stopping the smart TV from being used against you

S-Config S-config.com

DNS has a new encrypted version that isn't DoH or DoT, and almost nobody's adopted it yet

Gavin Phillips MakeUseOf

Linux never got a licensed DVD player, and the code everyone uses instead ended up on T-shirts and in a haiku

Adam Conway XDA Developers

AI Is Changing Website Security. Here’s What SEO Teams Should Know via @sejournal, @vahandev

Vahan Petrosyan Search Engine Journal

AI IR Overlay – Incident Response Specification for AI Agents

Darknet Darknet.org.uk

Act Now or Pay Later: Coalition of Top Companies Tells World to Get Its Act Together on Cybersecurity

Sean Craig Thedailyupside.com

Belgian Orders Demand Pirate Site Operators’ Bank Details, Crypto Wallets and Server Logs

Ernesto Van der Sar Torrentfreak.com

Australian cops cuff alleged TeamPCP masterminds

Simon Sharwood Theregister.com

Key Reasons Why Identity Fabric Matters in 2026

info@thehackernews.com (The Hacker News) Internet

Android 17 has some new tricks to keep your web traffic private

Stephen Schenck Android Authority

A Georgia Cop Used Flock to Track 2 Other Cops: His Ex and Her Friend

Caroline Haskins Wired

Two Alleged ‘TeamPCP’ Hackers Arrested in Australia

BrianKrebs Krebs on Security

ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories

info@thehackernews.com (The Hacker News) Internet

Android 17 boosts network security by hiding domain names, lets carriers disable 2G

Abner Li 9to5google.com

87% of German companies were attacked last year, and Russia has caught up with China

Ana-Maria Stanciuc The Next Web

Ring Gave Itself a Security Makeover Called TAKE. Here’s What’s Actually Changing

Tyler Lacoma CNET

US says Chinese hackers broke into Justice Department, NASA, Federal Reserve, Senate and more

By Raphael Satter and AJ Vicens Yahoo Entertainment

Gates warns society faces an AI-pocalypse unless we get more socialist

Dan Robinson Theregister.com

AurionMail: E2EE suite (CryptPad/Stalwart) with single-password UX

AurionMail Github.com

INTERPOL Operation Jackal IV Arrests 58, Identifies 263 in Global Cyber Fraud Crackdown

info@thehackernews.com (The Hacker News) Internet

AI firms debate connecting test sandboxes to the internet after breaches

Ana Maria Constantin The Next Web

No standing still: Zero Trust and cybersecurity

John Linford TechRadar

I disabled autofill and my password manager finally felt secure

Oluwademilade Afolabi MakeUseOf

New Account Security Features for WhatsApp

Facebook Fb.com

ReliaQuest Rejects Compromise Claims After ShinyHunters Incident

Phil Muncaster Infosecurity Magazine

24 npm Packages Abuse unpkg Mirrors to Host Fake Cloudflare CAPTCHA Pages

info@thehackernews.com (The Hacker News) Internet

Discord is yet to be served Take-Two's GTA 6 leak subpoena, which is set to demand broad access to user data

Sherif Saed Eurogamer.net

Fake Minecraft Clients Deliver WeedHack Malware Despite Infrastructure Takedown

Kevin Poireault Infosecurity Magazine

GTA 6 Leaker Drops New Nudity-Filled Gameplay, Polls People on Whether to Release Story Spoilers

Tom Phillips IGN

Apollo blames social engineering for a four-day breach in July

Ana Maria Constantin The Next Web

I stopped VPN blocks by turning my home network into a private exit node

Afam Onyimadu MakeUseOf

WordlistLoader Delivers Amatera via ClickFix, SynkLoader Phishes Windows Passwords

info@thehackernews.com (The Hacker News) Internet

Show HN: Kern – container and resource runtime in a 1.5 MB binary, no daemon

getkern Github.com

Everything I own, owned

Chaz Schlarp Schlarp.com

RCE As a Feature

Ellis Morning Thedailywtf.com

GTA 6 Leaks Prompt Take-Two to Seek Subpoenas for Microsoft, Discord Data

Oscar Gonzalez CNET

Ransomware attackers are zeroing in on mid-market companies

Anamarija Pogorelec Help Net Security

Week in review: Records allegedly stolen from Azure tenants, Medusa ransomware hits 500+ orgs

Help Net Security Help Net Security

Slovakia finds Russian backdoor in traffic speed cameras

Catalin Cimpanu Risky.biz

My Guaranteed Steps to Tell if a New Device Is a Flock Camera

Tyler Lacoma CNET

Why are ‘paranoid’ Claude agents launching a turf war and deploying self-replicating malware against each other? The experts weigh in

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

A supposed GTA 6 build is going around the internet, but don't be fooled: it's fake and full of malware

Simon Batt XDA Developers

InfraGuard v0.4.3

Kitploit Kitploit.com

simulacra: A modular, multi-node ESP32 anti-tracking decoy swarm — summon the crowd, bury the signal. · GitHub

mandarine Github.com

A 113 GB GTA 6 build is circulating online, but it appears to be fake

Abdul Haddi Notebookcheck.net

Unusual log in activities and other signals

Alphcrz BleepingComputer

Your Thunderbolt port can be used to steal data from a locked PC — here's the setting that stops it

Afam Onyimadu MakeUseOf

4 ways I secured my Plex server before exposing it to the internet

Jasmine Mannan XDA Developers

Is this the end of the GTA 6 leaks? Take-Two's legal crusade appears to shut down the hubs behind them

Vikki Blake Eurogamer.net

Block ads on nine devices for life for $11 (reg. $169.99)

DealPost Team PCWorld

4 super smart shifts proving privacy is software’s new killer feature

Will Jones The Next Web

14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2

info@thehackernews.com (The Hacker News) Internet

This Week in Security: Apple Warns Users, Stripe Merchants Leak Keys, Copilot Helps Hack Itself, and Comcast Senses Movement

Mike Kershaw Hackaday

Take-Two's legal action to find GTA 6 leaker begins, as it subpoenas Microsoft and Discord for any data "sufficient to identify the users person"

Robert Purchese Eurogamer.net

Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet

info@thehackernews.com (The Hacker News) Internet

Cisco Patches Nine Crosswork and Secure Workload Flaws, Five Scoring CVSS 10.0

info@thehackernews.com (The Hacker News) Internet

The Real Lives of Online Romance Scammers

Vivien Chang The New Republic

More Incidents of AIs Going Rogue in Cybersecurity Challenges

Bruce Schneier Schneier.com

Spoofed Serial Number Unlocks Cricut Machine

Zoe Skyforest Hackaday

Nine Million Photos of People’s Faces Discovered in Exposed Database

Matt Growcoot PetaPixel

The invisible passenger in your car

Dmitry Kalinin Securelist.com

Privacy advocates call on Maryland to investigate data brokers

Jude Joffe-Block NPR

AI agent suggested installing a malware package. Engineer almost took its advice

Avram Piltch Theregister.com

Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

info@thehackernews.com (The Hacker News) Internet

Cybersecurity Threat Delays Start of Classes at UT San Antonio

kathryn.palmer@insidehighered.com Inside Higher Ed

Elementor Pro Flaw Could Let Unauthenticated Attackers Upload PHP and Execute Code

info@thehackernews.com (The Hacker News) Internet

Comcast Xfinity Wants to Use Your Wi-Fi as a Motion Sensor in Your Home

Tyler Lacoma CNET

'Not a theoretical risk,' feds warn as attackers use AI-made code to hack critical infrastructure controllers

Jessica Lyons Theregister.com

Rogue ransomware affiliate poses as data recovery firm to steal payments

Lawrence Abrams BleepingComputer

Talk Python to Me: #559: 12 Things You Should (and Shouldn't) Do in AWS

Michael Kennedy Talkpython.fm

Security, Safety & Smarter WiFi: Comcast Launches Xfinity Shield With Built-In Home Protection

Danielle Canada Bossip

Don't panic over Windows' new 'no antivirus detected' warning just yet

Rob LeFebvre MakeUseOf

AI Has Turned Software Security Into a Race You Can’t Afford to Lose

Prince Kohli Entrepreneur

This VPN protects unlimited devices, and a 3-year subscription is on sale for $84

DealPost Team PCWorld

Border Agents Searched His Phone 5 Times Without a Warrant. He's Asking the Supreme Court To Put a Stop to It.

Elizabeth Nolan Brown Reason

ClarityCheck people-finder left millions of face photos exposed, likely without their knowledge

Ben Lovejoy 9to5Mac

Upgrade your online privacy with these Proton deals

Sponsored Post 9to5google.com

Rethinking secure file transfer for a cross-domain world

James Neilson TechRadar

Comcast's Xfinity Shield turns your router into a motion sensor — and it may share what it sees

Hamed Paydarfar MakeUseOf

Banks look for fraud signals in customer behavior

Anamarija Pogorelec Help Net Security

'This technology turns every router into a potential means for surveillance': Report claims Wi-Fi devices could 'quietly identify' people with nearly 100% accuracy

Efosa Udinmwen TechRadar

Alternative to WMIC: PowerShell Get-CimInstance

IT Experts 4sysops.com

CISA orders a three-day patch after a flaw in the Ray AI framework comes under active attack

Ana-Maria Stanciuc The Next Web

Show HN: macOS data protection keychain for Electron apps

SafePal Hardware Wallet Maker Says Flaw Exposed Data of Nearly 40,000 Customers

info@thehackernews.com (The Hacker News) Internet

Hackers Tricked a Major Retailer’s AI Shopping Bot to Do Something It Was Never Supposed To

Nelson Aguilar CNET

Ghosts in the machine: AI malware shows why it is time to extend Zero Trust to code

Ken Ammon TechRadar

Attackers Could Take Over Your Mac Through Screen Sharing Unless You Update Now

Omar Gallaga CNET

Origin Energy hack traced to Accenture's Manila office

David Taylor ABC News (AU)

Snowflake GitHub Actions Flaw Lets Crafted Issues Trigger Command Injection

info@thehackernews.com (The Hacker News) Internet

Apple's macOS Screen Sharing Flaw Is Being Exploited in the Wild

Tim Hardwick MacRumors

Inside Defcon, the Conference That Made Cybersecurity Noob-Friendly

Nelson Aguilar CNET

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

info@thehackernews.com (The Hacker News) Internet

Agentic AI costs set to balloon fivefold by 2028

Dan Robinson Theregister.com

Public Wi-Fi just got riskier. Follow these 4 security tips

Alaina Yee PCWorld

Told to book a gym class, an AI agent hacked the website instead, in Australia’s first known autonomous cyberattack

Ana Maria Constantin The Next Web

Suspected China-Nexus Actor Exploits VMware vCenter Flaw, Deploys Babuk-Derived Ransomware

info@thehackernews.com (The Hacker News) Internet

Black Hat and DEF CON are AI conferences now, too

Brandon Vigliarolo Theregister.com

Akira Ransomware Uses Safe Mode to Bypass EDR

Pierluigi Paganini Securityaffairs.com

mssPortable 1.457.201 (Microsoft Safety Scanner antivirus launcher) Released

John T. Haller Portableapps.com

Week in review: Salesforce and ServiceNow portals exposed for 17 months, exploited Metabase 0-day

Help Net Security Help Net Security

XCancel — An Unofficial Twitter/X Mirror

John Gruber Xcancel.com

I’m a gamer and a parent. The KIDS Act makes my kids less safe.

Donald Kimball TheBlaze

Security Affairs newsletter Round 590 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Crypto wallet SafePal reveals a data breach exposing nearly 40,000 customers' order info

Omkar Godbole CoinDesk

New AmnesiaStealer macOS malware hijacks browser sessions via remote control

Bill Toulas BleepingComputer

How Trump Left America Vulnerable to Cyberattacks

Nick Miroff, Yvonne Wingett Sanchez The Atlantic

I'll build a house inside of you

sansets Archiveofourown.org

DHQ alerts public over attempts to breach official X account

Henry Oduah Vanguard

W10 PC running super slow on load

beautflchillz BleepingComputer

‘The great quantum migration’ is coming as more than $2 trillion in digital assets is at risk—nearly the entire value of the overall crypto market

Joshua Hong Yahoo Entertainment

These 6 homelab services are seriously boring and geniunely essential

Afam Onyimadu MakeUseOf

Why was there an 'evil’ Delta airlines Wi-Fi network? The experts weigh in

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

Met Police apologises for data breach involving alleged Al Fayed victims

https://www.facebook.com/bbcnews BBC News

Microsoft makes threat modeling central to post-quantum migration

IT News 4sysops.com

macOS Screen Sharing Flaw Exploited to Deploy Monero Miners

Pierluigi Paganini Securityaffairs.com

Three new Windows flaws can bypass security, gain system privileges, and even install malware remotely

Kishalaya Kundu TechSpot

Momentum builds to ban Madison Square Garden's 'surveillance empire'

Charles Lane Gothamist

The US government wants private companies to start hacking the hackers

Matt Horne Android Authority

mssPortable 1.457.164 (Microsoft Safety Scanner antivirus launcher) Released

John T. Haller Portableapps.com

The Agentic AI threat cluster: Seven incidents, three actors, and what they mean for your exposure

Research Special Operations Tenable.com

The Illusion of a Lock – How AI is changing the speed and scale of hands-on WordPress vulnerability research.

Luke Herbrandson Sucuri.net

Snooping Flume Water Monitor Data On The Wire

Zoe Skyforest Hackaday

Why Software Quality Is Now a Founder-Level Problem, Not Just an Engineering One

Mudit Singh Entrepreneur

Who’s Tracking You? Use This New Service to Find Out

BrianKrebs Krebs on Security

EU introduces strict new security rules for VPNs with the help of industry giants

Rene Millman TechRadar

I pitted Cloudflare against Google DNS on Android, but speed wasn't the real surprise

Dhruv Bhutani Android Police

NHS service admits data breach due to pager use

https://www.facebook.com/bbcnews BBC News

The Safety Reckoning Inside OpenAI

Maxwell Zeff Wired

Production-Safe Testing: The Missing Piece in Most DevSecOps Strategies

Dharmesh Acharya DevOps.com

Domas: Bypassing memory protection with AMD's memory controllers

Steam customers caught in supply-chain breach as hackers target logistics partner

Dr. Tim Sandle Digital Journal

Taiwan says AI agents helped hack its government in four days

Ana Maria Constantin The Next Web

Trezor warns 14,000 customers after fulfilment partner suffers data breach

Olivier Acuna CoinDesk

Building a practical path to post-quantum cryptography

Jesse Schrater MIT Technology Review

Exposed AWS Access Key Linked to Data Breach Affecting 1500+ UK Charities

James Coker Infosecurity Magazine

Chrome just flagged a hugely popular extension as unsafe

Hillary Keverenge Android Authority

Armored Likho expands its cyber-espionage toolkit

Konstantin Isakov Securelist.com

What I Learned Securing Sniffnet with the GitHub Secure Open Source Fund

Giuliano Bellini Sniffnet.app

Your monitor could install apps on your Windows PC without permission, but the fix is simple

Samarveer Singh XDA Developers

Flock CEO: ‘We got this one wrong’

Lauren Feiner The Verge

CEVA Logistics Cyberattack Disrupts European Warehouses and Shipments

Pierluigi Paganini Securityaffairs.com

Bitcoin firms ask AI labs for same tools attackers already have

Shaurya Malwa CoinDesk

Researcher bypasses Microsoft Defender security patch, seizing control

Evan Schuman Computerworld

This shocking Zoom bug allowed silent device takeovers on Android and iOS

Hillary Keverenge Android Authority

Tailscale Traces Database Corruption to 16y/o SQLite WAL-Reset Bug

Alex Chan Tailscale.com

Are hacks of U.S. water facilities a new front in the Iran war?

Jenna McLaughlin NPR

Malicious LiteLLM Releases Tied to Trivy Hack May Have Exposed 2,100+ Organizations

info@thehackernews.com (The Hacker News) Internet

The UK's on-device scanning plan is a threat to enterprise environments

Matthew Lloyd Davies TechRadar

Microsoft Plugs Nearly 400 Security Holes

BrianKrebs Krebs on Security

These seaside apartments were a ghost city - then police say scammers moved in

https://www.facebook.com/bbcnews BBC News

338 million attack simulations reveal the state of enterprise defense

Help Net Security Help Net Security

Cybersecurity’s identity crisis: why trust can no longer begin and end at login

Vaibhav Dutta TechRadar

IT Outsourcing And Cybersecurity Habits Of Thriving Businesses

Addicted2Success Editor Addicted2success.com

Trump’s catering truck caper

Caitlin Dewey Vox

Every major free DNS service has a hidden second mode

Gavin Phillips MakeUseOf

A Zoom Screen-Sharing Bug Let Anyone Take Over Other Devices on a Call

Lily Hay Newman Wired

Gunra Ransomware Exploits Fortinet and Schneider Electric Flaws to Breach Networks

info@thehackernews.com (The Hacker News) Internet

A New Free Seminar Teaches Documentary Filmmakers When and How to Opt Out of AI

Brian Welk IndieWire

Preparing for post-quantum cryptography: Building a practical roadmap

Rich Hall TechRadar

No evidence of data breach after Chinese-made component found in Navy drones, MoD says

https://www.facebook.com/bbcnews BBC News

Cybersecurity jobs available right now: August 11, 2026

Anamarija Pogorelec Help Net Security

Over 181,000 AI meeting recordings left wide open in note taking app

BobDaHacker Bobdahacker.com

North Korea’s hackers using AI for attacks, cybersecurity firm says

John Power Al Jazeera English

Your Home Needs These 8 Headache-Free Privacy Boosts

Tyler Lacoma CNET

Steam Machine And Controller User Data Leaks After Valve’s European Supplier Gets Hit With Cyber Attack

Lewis Parker Kotaku

Linux Fu: Heads or Tails for VPN

Al Williams Hackaday

Protect Yourself From Cybercrime for as Little as $2 Per Month

Tuong Nguyen CNET

What Happened to HackerOne?

Joel Margolis Teknogeek.io

The Hacker's Renaissance

AI agent hacks gym booking system while trying to get its user a spot

Adamya Sharma Android Authority

Product showcase: Enpass Password Manager breaks away from the proprietary cloud model

Anamarija Pogorelec Help Net Security

Three labs, three breaches, one vendor. The AI hacking story was never about the models.

Ana Maria Constantin The Next Web

Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026

Anamarija Pogorelec Help Net Security

Open-source stealth USB hides an encrypted partition behind an 8GB decoy drive — 'Phantom Drive' appears as a regular USB stick until you create a text file to unlock the hidden data

editors@tomshardware.com (Hassam Nasir) , Hassam Nasir Tom's Hardware UK

Security Affairs newsletter Round 589 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Ransomware gangs skip the CEO, head straight for the 40-something IT manager

Carly Page Theregister.com

More Police Officers Fired, Investigated, or Arrested for Misusing Flock Camera Systems

EditorDavid Slashdot.org

Calgary’s quantum defence bub signals secure communications in Canada

Dr. Tim Sandle Digital Journal

Sensitive Info Goes Into ‘No Reply’ Emails Constantly. This Guy Sees It All

Matt Burgess Wired

Now we have a timeline of the OpenAI accidental attack against Hugging Face

Simon Willison Simonwillison.net

How AI-Powered Business Email Compromise Scams Are Stealing Billions

Steve Weisman, Contributor, Steve Weisman, Contributor https://www.forbes.com/sites/steveweisman/ Forbes

I stopped using free VPNs after I learned what they do with your traffic

Joe Rice-Jones XDA Developers

Water Utilities Group Partners With DEF CON Offshoot For Water Watch Center

BeauHD Slashdot.org

AI chat bots are sliding into League of Legends friend requests

Pieter Arntz Malwarebytes.com

Could this be the end of BIOS-locked laptops? AI tweaker deploys Claude to unlock and change settings for good

Rahimnoorali11@gmail.com (Rahim Amir) , Rahim Amir TechRadar

Nearly 800 malicious npm packages hide RAT behind a simple require()

IT News 4sysops.com

Malicious AI ‘skills’ turned agents into credential thieves, at scale

Ana Maria Constantin The Next Web

This Week in Security: Claude Gets Hacking, Hotel WiFi, and NPM Compromised Again

Mike Kershaw Hackaday

Weak Passwords Just Exposed Our Water Supply to Iranian Hackers

German airport drone-bomb: Could Russia be involved?

https://www.facebook.com/bbcnews BBC News

OpenAI and Anthropic's models attacked real companies during safety tests, and most victims never noticed

Adam Conway XDA Developers

Mythos Attempted to Social Engineer Open Source Maintainer to Merge Malware

Sarah Gooding Socket.dev

Jealously Watching OpenAI and Anthropic, Meta Suddenly Claims That Its AI Went on a Hacking Spree Too

Victor Tangermann Futurism

Thousands of server motherboards are vulnerable to controller flaws that could give attackers hardware-level control

Skye Jacobs TechSpot

Microsoft pushes safer software construction as AI makes offense cheap

Ryan Stevens SiliconANGLE News

Cyberattack on Ceva Logistics warehouses in Europe impacts retailers

Eric Kulisch Yahoo Entertainment

OpenAI's Models Shared Hacking Tips On a Secret Messaging Board Before Hugging Face Breach

BeauHD Slashdot.org

Biggest backdoor yet found in Chinese routers sold under multiple brand names

Ben Lovejoy 9to5Mac

Canadian Man Pleads Guilty in Snowflake Extortions

BrianKrebs Krebs on Security

AI Recommendation Poisoning: How "Ask AI" Buttons Silently Alter LLM Memory

info@thehackernews.com (The Hacker News) Internet

Microsoft warns hotel/airport Wi-Fi is being hijacked to steal your login

Hans-Christian Dirscherl PCWorld

This major smartphone maker just turned up in a list no company wants to be on

Adamya Sharma Android Authority

OpenAI Didn’t Notice Its AI Agents Using a Message Board to Plan Their Hacking Spree

Lily Hay Newman Wired

What Happens To Your Computer If You Skip Windows Updates

staff@bgr.com (Alan Bradley) BGR

Cloudflare is the only vendor named a Visionary in 2026 SASE and SSE reports

Michael Keane Cloudflare.com

How to Store Ebooks in Instagram Reels and Other Covert Data Storage Tricks

Jason Kottke kottke.org

Trump weaponizes FCC to ban new foreign-made connected solar inverters

Fred Lambert Electrek

Trojanized npm Packages Decode C2 IP From Ethereum Recipient Addresses

info@thehackernews.com (The Hacker News) Internet

2 New Jersey municipal water systems targeted in cyberattacks

Aaron Katersky Abcnews.com

Anthropic’s New AI Model Can Identify More Software Bugs Than Ever. Microsoft Is Struggling To Fix Them Fast Enough.

Renee Dudley and Doris Burke Techdirt

Pass the Passkey: A Novel Attack Surface in Passwordless Authentication

Arie Olshtein Paloaltonetworks.com

The White House Is Keeping Its AI Cybersecurity Framework Secret

Maxwell Zeff, Lauren Goode, Will Knight Wired

Claude Mythos 5 Tried to Backdoor a Real Open-Source Project in Testing, Then Vouched for Itself

info@thehackernews.com (The Hacker News) Internet

At least 12 states face cyberattacks on their water systems, sources say

Luke Barr, Jack Date, Katherine Faulders, Josh Margolin, Aaron Katersky Abcnews.com

Vlt 1.0 and Hosted Package Registries

darcy Www.vlt.io

Why all‑in‑one online security isn't just easier for modern households — it's essential

mhuck@live.com (Mauro Huculak) , Mauro Huculak Windows Central

Greatness PhaaS Adds Device Code Phishing to Bypass MFA and Steal Tokens

info@thehackernews.com (The Hacker News) Internet

Show HN: cMCP, deny an AI agent's tool call and get a signed receipt

agentrust-io Github.com

Keyv and friends compromised in active Shai-Hulud supply chain attack

Ilyas Makari Aikido.dev

DOUBLECUP Uses ClickFix and Cached PNGs to Deliver CountLoader and DeviceManager RAT

info@thehackernews.com (The Hacker News) Internet

No, Apple Photos face recognition is not a privacy threat – quite the opposite

Ben Lovejoy 9to5Mac

Fraud alerts, credit locks, dark web scans — this $99.99 LifeLock plan does the worrying for you

DealPost Team PCWorld

UK’s Police National Legal Database Reveals Data Breach

Phil Muncaster Infosecurity Magazine

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water-System Attacks and Dangling DNS Hijacks

info@thehackernews.com (The Hacker News) Internet

Samsung Bans Smart TV Apps That Share Users' Internet Connections

BeauHD Slashdot.org

Get a Remote Terminal With One Binary, One URL, and Zero Config

Donald Papp Hackaday

Apple launches second legal challenge to UK iCloud backdoor order, per report

Zac Hall 9to5Mac

Anthropic reveals Claude AI model hacked three companies during tests — so how worried should we be?

Sead Fadilpašić TechRadar

An analysis of incidents at Brazilian educational institutions

Cristian Souza Securelist.com

Mapping the malware blast radius a single alert won’t show you

Mirko Zorz Help Net Security

5 Secure Password Managers You Should Try Instead Of Google Password Manager

staff@bgr.com (Alvin Wanjala) BGR

Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable

info@thehackernews.com (The Hacker News) Internet

Your Android VPN Is Only Useful If You Configure It Properly

AndroidGuys AndroidGuys

One of the most popular VPNs just put their PRO lifetime plan on sale for $40

Boing Boing's Shop Boing Boing

That innocent-looking game on your smart TV might be quietly routing someone else's internet traffic through your home

Jeff Butts XDA Developers

Security Affairs newsletter Round 588 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Coldcard hack sparks biggest sub-1 BTC move since FTX: CryptoQuant

Cointelegraph by Helen Partz Cointelegraph

Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC released

Help Net Security Help Net Security

Show HN: Bor – Open-source policy management for Linux desktops

eniac111 Getbor.dev

My 140 reused passwords finally came back to bite me. Here’s how I fixed it

Megan Ellis Android Authority

CISA Alert: Water Sector PLC Targeting

Alex Gartner Censys.com

Windows Hello vs. Enhanced Sign‑in Security: Which sign‑in method actually keeps your Windows 11 PC safer, and what's the difference?

mhuck@live.com (Mauro Huculak) , Mauro Huculak Windows Central

Russian Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Tokens

Pierluigi Paganini Securityaffairs.com

Microsoft’s AI Cybersecurity Push Could Become a Major Growth Driver for MSFT Stock

Ian Cooper Barchart.com

What Makes an Online Casino Feel Safe? The Technology Behind Secure Gambling

efosataiwo@vanguardngr.com Vanguard

Anthropic found Claude hacking real companies during supposedly sealed tests

Matt Horne Android Authority

Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware

info@thehackernews.com (The Hacker News) Internet

Amgen discloses data breach involving patient health information

Reuters Yahoo Entertainment

Vulnerability & Patch Roundup — July 2026

Sucuri Malware Research Team Sucuri.net

This Week in Security: What’s in a name, the AI Bugpocalypse Hits Everyone, OpenWRT flaws, and Duress Passwords

Mike Kershaw Hackaday

Apple and Google are hosting hundreds of dangerous VPN links — here is why your device is at risk

Rene Millman TechRadar

Best Password Manager for 2026

Western allies warn North Korean IT workers funding nuclear arsenal

Heba Habib Al Jazeera English

Google fixed more Chrome bugs in June than over the past two years, thanks to AI

Chrome Security Team Blog.google

Teen hackers tell BBC how police are helping them use their skills for good

https://www.facebook.com/bbcnews BBC News

Microsoft confirms an AI worm is propagating through Copilot and other MS apps

Evan Schuman Computerworld

Researchers Expose Flying Eagle Criminal Ecosystem Behind Fake Chinese Police App

Pierluigi Paganini Securityaffairs.com

CISA Urges Water Sector to Protect OT After Coordinated Attacks on PLCs

Mike Lennon Securityweek.com

AI agents are changing where cybersecurity seed funding lands

Anamarija Pogorelec Help Net Security

Going beneath NTFS: USN Journal, dfir_NTFS, and artefact-driven investigations

Andrea Fortuna Andreafortuna.org

Most Smart Fitness Devices Lack Essential Data Protection, EFF Warns

Jeff Carlson CNET

DPRK-Linked macOS Malvertising Uses Fake Updates to Deliver Crypto-Stealing Malware

info@thehackernews.com (The Hacker News) Internet

OpenAI’s Hacking Debacle Was a Human Mistake

Lily Hay Newman Wired

The biggest data leaker is probably not who you think it is

Sead Fadilpašić TechRadar

U.S. Government Bans Foreign-Made Robots

Rain Noe Core77.com

I found the perfect free web app. Then I checked what it was doing

Mark Hachman PCWorld

Amazon Links Debug and Chalk npm Hijack to North Korea’s Sapphire Sleet

info@thehackernews.com (The Hacker News) Internet

Toy Ghouls’ new toy: the GenieLocker ransomware

Fedor Sinitsyn, Yanis Zinchenko Securelist.com

The FCC’s foreign robot ban declares war on robotic vacuum cleaners

Stephen Schenck Android Authority

The Growing Threat of Docusign Phishing Attacks

Tara Gould Darktrace.com

Online scams cost Americans almost $150B last year – 7x more than reported

Ben Lovejoy 9to5Mac

OpenAI’s rogue AI agent didn’t stop at hacking Hugging Face

Robert Hart The Verge

How are AI models able to autonomously hack others?

Hanna Duggal, Mohamed Hussein Al Jazeera English

73% of Organizations Say They Are Not Fully Ready for a Major Cyberattack

info@thehackernews.com (The Hacker News) Internet

We Hardened an AI Security Platform Against 16 Critical Vulnerabilities

Higgsfield Higgsfield.app

Android malware detection collapses when the context stage comes out

Anamarija Pogorelec Help Net Security

Ariana Grande is suing the hackers who’ve been leaking her songs and videos for years

Stevie Bonifield The Verge

OpenAI Agent Used Exposed Credentials Across Four Services During Hugging Face Breach

info@thehackernews.com (The Hacker News) Internet

Coordinated “cyberattack” on Minnesota water utilities: What you need to know

Research Special Operations Tenable.com

Healthcare Is Undergoing A Cybersecurity Crisis, And Its Not Slowing Down

Dr. Sai Balasubramanian, M.D., J.D., Contributor, Dr. Sai Balasubramanian, M.D., J.D., Contributor https://www.forbes.com/sites/saibala/ Forbes

CubePilot drone software dev hit by DNS hijacking to intercept traffic

Bill Toulas BleepingComputer

I Don’t Travel Without These Online Safety Tools and Tricks

Krishi Chowdhary CNET

Anthropic says your leaked Claude chats are working as intended

Ana Maria Constantin The Next Web

Tengu Botnet Reboots Compromised Linux Devices When Defenders Kill Its Process

info@thehackernews.com (The Hacker News) Internet

Claude chats exposed in Google searches – another endorsement of Apple’s privacy approach

Ben Lovejoy 9to5Mac

Microsoft Says New Cybersecurity AI Model Helps MDASH Hit 95.95% at Half the Cost

info@thehackernews.com (The Hacker News) Internet

Amazon Neptune now supports tag-based access control for IAM

aws@amazon.com Amazon.com

Ever shared a Claude chat? It may have appeared in Google Search

Matt Horne Android Authority

Microsoft Says Its New Cybersecurity AI Beats Industry Leaders at Half the Cost

Corinne Reichert CNET

Hackers are compromising hotel Wi-Fi gateways to hijack Microsoft 365 accounts

Taryn Plumb Computerworld

Disrupting supply chain attacks on npm and GitHub Actions

Greg Ose Github.blog

A trove of users’ seemingly private conversations with Anthropic’s Claude AI chatbot showed up in Google search results

Beatrice Nolan Yahoo Entertainment

Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update

info@thehackernews.com (The Hacker News) Internet

AI and regulation are reshaping the future of building security

Kelly Gill TechRadar

User-made maps from Steam top-seller Meccha Chameleon have been found to contain malware, just as the game's official Discord server got hacked

Sherif Saed Eurogamer.net

Fairlife restarts production after cyberattack, Coca-Cola says

Dean Best just-drinks.com

Best Password Manager of 2026: Expert Recommendations for Your Credential Security.

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

GitHub delays version updates so malware gets caught first

Sinisa Markovic Help Net Security

Texas Man Texts With Potential Fort Worth Landlord. Then He Asks Him To Download Something Suspicious

charlottecolombo BroBible

How I stopped being my parents' emergency IT hotline — The complete list of Windows Security settings I made them fix once and for all

c.cale.hunt@gmail.com (Cale Hunt) , Cale Hunt Windows Central

This free app isn't a VPN, but it encrypts everything my phone sends

Gregory Gibson MakeUseOf

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 107

Pierluigi Paganini Securityaffairs.com

Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached

Help Net Security Help Net Security

Binance ‘red teams’ its own staff every month to keep hackers out

Cointelegraph by Felix Ng Cointelegraph

Steam forum ClickFix attacks infect gamers with XMRig cryptominers

Lawrence Abrams BleepingComputer

My parents’ Android phones were ruined by invasive ads. Here’s how I fixed them for good

Andy Walker Android Authority

Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable

info@thehackernews.com (The Hacker News) Internet

Apple Sued by Customers Who Lost Combined $1.8 Million Through Fake Bitcoin Wallet in App Store

Joe Rossignol MacRumors

OpenAI’s hacking model was active on the internet for several days

IT News 4sysops.com

Experts claim to have found more weaknesses in Apple's Gatekeeper tool — but it doesn't seem too bothered

Sead Fadilpašić TechRadar

Major Video Doorbell Companies Are Being Sued for Privacy Violations. Here’s Why

Tyler Lacoma CNET

ShinyHunters data leaks fuel $2,000 sextortion email scam

Lawrence Abrams BleepingComputer

No more ads? Get speedy, secure, and seamless connectivity with this VPN for 94% off

Boing Boing's Shop Boing Boing

Hardening Windows Server: Essential tools and techniques for administrators

IT Experts 4sysops.com

Jim Cramer Says Buy CrowdStrike (CRWD) as AI Agents Go Rogue

Syeda Seirut Javed Yahoo Entertainment

The Truth About Fake USB Drives Circulating Online

News On Japan Newsonjapan.com

Android May Soon Restrict On-Device ADB

Kitsumed Github.io

How to Find and Back Up Your BitLocker Recovery Key in Windows 11 and 10

Aseem Kishore Helpdeskgeek.com

This Week in Security: AI is a Mess, Hacking Car Chargers, an OpenSSL DoS, and Factories Under Attack

Mike Kershaw Hackaday

BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery

info@thehackernews.com (The Hacker News) Internet

The biggest indie "friendslop" game of 2026 appears to be delivering malware via Steam Workshop — How to protect your PC (and what to do next)

c.cale.hunt@gmail.com (Cale Hunt) , Cale Hunt Windows Central

Fake Notepad++ Plugin Delivers MATCHBOIL.V2 in UAC-0099 Attacks

info@thehackernews.com (The Hacker News) Internet

OpenAI Agent Escaped Testing and Launched an Autonomous Hack

Lori Grunin CNET

“Digital Colonialism”: U.S. Demands To Access Africans’ Data Raise Privacy, Sovereignty Concerns

Sharon Lerner and Anna Maria Barry-Jester Techdirt

The best-funded companies open the most phishing attachments

Mirko Zorz Help Net Security

Bad news — paying a ransomware demand might cause hackers to come back and ask for more

Sead Fadilpašić TechRadar

FakeGit Targets AI Coding Agents with Malicious GitHub Repos

Jeff Burt DevOps.com

Power Operators Must Plan Now for Four Quantum Attacks

Guest Blogger Wattsupwiththat.com

Attackers Weaponize GitHub Actions Runners to Target cPanel and WHM Servers

info@thehackernews.com (The Hacker News) Internet

Encryption in the 1790s

Al Williams Hackaday

End-to-End Encryption and “Going Dark”

Bruce Schneier Schneier.com

How are companies, governments responding to the OpenAI hack?

Al Jazeera Staff Al Jazeera English

There are some files you don't want anyone to open, and this Android app takes care of them

Sagar Naresh MakeUseOf

Google now lets you sign in to your account using a selfie video

Andrew Liszewski The Verge

Two-Thirds of Ransomware Victims Say AI Boosted Attack Effectiveness

Danny Palmer Infosecurity Magazine

OpenAI blamed a hacking event on its AI models gone rogue. Here is what to know

The Associated Press NPR

Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft

Pierluigi Paganini Securityaffairs.com

OpenAI helps address a terrible AI security flaw following Hugging Face incident

nickodiaz@sbcglobal.net (Nickolas Diaz) , Nickolas Diaz Android Central

Adobe Acrobat Extension Flaw Let Malicious Sites Read WhatsApp Web Data

info@thehackernews.com (The Hacker News) Internet

What OpenAI’s rogue agent really did in the Hugging Face hack

Chris Stokel-Walker Scientific American

A bizarre new malware campaign hacks your printer and forces it to print out ransomware demands

Sead Fadilpašić TechRadar

Why Modern SOCs Need Multi-Layered Detections

info@thehackernews.com (The Hacker News) Internet

An OpenAI Model Escaped Its Sandbox and Hacked Hugging Face

Alex Tabarrok Marginalrevolution.com

So Reddit has decided that plain HTML is unsafe

Cole K Cole-k.com

OpenAI admits its agent went rogue and hacked AI startup Hugging Face

Claire Cameron Scientific American

Why you can’t buy security on the dark web

Andrey Leskin TechRadar

France's Anssi Will Block PQC-Free Products from Certification Starting 2027

Marin Ivezic Postquantum.com

A hotel leaked my data to hackers. You could be next

Alaina Yee PCWorld

New Bit2Watt Attack Could Let Cloud Tenants Disrupt Power Grids Without an Exploit

info@thehackernews.com (The Hacker News) Internet

The FBI has arrested a 21-year-old alleged to have stolen $220,000 through Steam using malware-ridden games

Connor Makar Eurogamer.net

FBI Warns of Deepfake Videos Impersonating IC3 Leadership

Alessandro Mascellino Infosecurity Magazine

Estée Lauder discloses data breach tied to Oracle EBS vulnerability

Sinisa Markovic Help Net Security

New ENCFORGE Ransomware Targets AI Model Files in Langflow RCE Attack

info@thehackernews.com (The Hacker News) Internet

The FCC is planning to retroactively ban disguised DJI gadgets

Sean Hollister The Verge

The air gap is a myth and other OT security truths

Mirko Zorz Help Net Security

Protect Your Privacy with California's DROP Tool

Hayley Tsukayama EFF

Zimbra Update Patches Critical Vulnerabilities

Ionut Arghire Securityweek.com

Hacker wipes Romania's land registry database

Catalin Cimpanu Risky.biz

FBI accuse Steam user of stealing over $220,000 via malware-infected games like BlockBlasters, Lunara and Dashverse

Edwin Evans-Thirlwell Rock Paper Shotgun

HollowGraph Malware Hides C2 and Stolen Files in Microsoft 365 Events Dated 2050

info@thehackernews.com (The Hacker News) Internet

UK's seventh prime minister in a decade says he'll ditch digital ID scheme

Carly Page Theregister.com

'It’s time to punch more holes in the closed Internet' — This free VPN now promises to be even better at evading censorship

Rene Millman TechRadar

SleeperGem Uses Three Malicious RubyGems Packages to Target Developer Machines

info@thehackernews.com (The Hacker News) Internet

Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25

Adam Kues Slcyber.io

Sign Commits from Anywhere Without Your Keys Going Anywhere

Phil Haack Haacked.com

A password alone isn't enough: How to really secure your accounts

Steffen Zahn Notebookcheck.net

Volexity Uncovers Zero-Day Campaign Targeting SonicWall VPN Appliances

Pierluigi Paganini Securityaffairs.com

FBI arrests 21-year-old accused of infecting 8,000 PCs with malware through fake Steam games

Kishalaya Kundu TechSpot

Windows 10 Still Being Used, Often Unpatched and Insecure

EditorDavid Slashdot.org

Security Affairs newsletter Round 586 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

South Korean regulator begins sanctions process against Dunamu: Report

Cointelegraph by Zoltan Vardai Cointelegraph

Hackers abuse ViPNet software to target Russian govt agencies

Bill Toulas BleepingComputer

Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logs

Anamarija Pogorelec Help Net Security

Deepsec

vercel-labs Github.com

blind-transpiler 1.0.0

joshimohit@bhu.ac.in Pypi.org

Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits

Pierluigi Paganini Securityaffairs.com

Your Period Tracker Is (Probably) Spying on You

Andy Greenberg, Dell Cameron, Lily Hay Newman Wired

Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer’s Network

Pierluigi Paganini Securityaffairs.com

Cybercriminals are cashing in on the World Cup by selling stolen streaming accounts

Tatiana Sataua Yahoo Entertainment

TP-Link Kasa cameras leaked home GPS via unauthenticated UDP for 6 years

BadChemical Github.com

World's largest health organization threatens to jail or fire staff reading patient data 'without legal justification

Efosa Udinmwen TechRadar

This Week in Security: Another Record Patch Tuesday, LAME is More Secure, Secure Boot is Less Secure, and Milk Malware

Mike Kershaw Hackaday

My important files back themselves up now, and it took less than an hour to set up

Tashreef Shareef MakeUseOf

GoldenEyeDog Subgroup Linked to DigiCert Breach and Code-Signing Certificate Theft

info@thehackernews.com (The Hacker News) Internet

Madison Square Garden Sued WIRED for Saying It Tracked Gay Celebrities. WIRED Says Msg’s Own Complaint Confirms It

Nadia Santiago Thoughtcatalog.com

CISA Adds Exploited SharePoint RCE Zero-Day CVE-2026-58644 to KEV

info@thehackernews.com (The Hacker News) Internet

Show HN: ReasonGate- An explainable gate that blocks LLM prompt injection

cgrtml Github.com

ACR Stealer: Two observed intrusion chains amid increased threat activity

Microsoft Security Research and Balaji Venkatesh S Microsoft.com

'If you have something that you don't want anyone to know, maybe you shouldn't be doing it in the first place; — quote of the day by ex-Google CEO Eric Schmidt

Keumars Afifi-Sabet TechRadar

Grok CLI Secretly Uploaded Full User Directories and SSH Keys

Julian Horsey Geeky Gadgets

US Sanctions First VPN in Crackdown on Ransomware Criminals

Alex Valdes CNET

‘No company is going to go to jail for you’: Proton’s CTO on balancing privacy, policy, and trust

Nilay Patel The Verge

ThreatsDay: Game Cheat Spyware, 24-Hour Ransomware, Chrome Sync Stalking + 12 More Stories

info@thehackernews.com (The Hacker News) Internet

20+ Hijacked Government Websites Became an Attack Channel

info@thehackernews.com (The Hacker News) Internet

‘Selfish Bravado’ Behind TfL Cyber-Attack, Judge Says as Pair Jailed

Kevin Poireault Infosecurity Magazine

Canvas Pauses Data Delivery Due to Potential 'Security Threat'

kathryn.palmer@insidehighered.com Inside Higher Ed

The Three-Second Theft: Why AI Voice Fraud Outruns Every Defence

SmarterArticles Smarterarticles.co.uk

Compromised AsyncAPI npm Packages Deliver Multi-Stage Botnet Malware

info@thehackernews.com (The Hacker News) Internet

You have a strong password. Here’s why your online accounts are still at risk

Karandeep Singh Android Authority

California Steps Back From Dangerous Expansion of its Age-Gating Law

Rindala Alajaji EFF

The network perimeter is dead. Now what?

Alan Stewart-Brown TechRadar

Your travel habits can leak sensitive info about you. Here’s what to do instead

Alaina Yee PCWorld

Who's running all those tiny RPKI servers?

Ties Dirksen Apnic.net

I tricked Claude into leaking your deepest, darkest secrets

Ayush Paul Ayush.digital

AI used to help plan the break-in, now it’s doing the break-in

Anamarija Pogorelec Help Net Security

Two SonicWall SMA 1000 Zero-Days Exploited, One Could Enable Admin Commands

info@thehackernews.com (The Hacker News) Internet

Dossier : Antivirus PC : lequel choisir pour protéger son ordinateur en 2026 ?

L'équipe Services Les Numériques

Probe into claims Southport victims' NHS records accessed

https://www.facebook.com/bbcnews BBC News

Microsoft’s fix for RoguePlanet has its own new disk space bug

Mikael Markander PCWorld

CrashStealer malware masquerades as Apple’s crash report tool to raid your Mac

Anurag Chawake Cult of Mac

U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware Support

info@thehackernews.com (The Hacker News) Internet

Flock is falling out of favor with police departments

Katherine Li Business Insider

Just Let Me Write Digits

Guillaume Endignoux Gendx.dev

The Value of Continuous IT Infrastructure Monitoring for NJ Businesses

Chris Turn Socialmediaexplorer.com

WhatsApp now testing its encrypted cloud storage backup solution for iOS

Sagar GSMArena.com

Defending SaaS-based applications against ShinyHunters OAuth abuse

Microsoft Security Research and Microsoft Defender Security Research Team Microsoft.com

Zimbra patched a flaw that let hackers hijack accounts just by sending an email

Alfonso Maruccia TechSpot

The 6.9 Million People Whose Genetic Data Leaked from 23andme Are Finally Getting Paid, and the Total Is $46.75 Million

Chris Lavergne Thoughtcatalog.com

Stop looking for ironclad cybersecurity answers. They often don’t exist

Alaina Yee PCWorld

A Leak of San Francisco Police Drone Footage Exposes the New Reality of Urban Surveillance

Andy Greenberg, Dhruv Mehrotra Wired

I ditched Windows Firewall's confusing interface for this free alternative that actually makes sense

Oluwademilade Afolabi MakeUseOf

Border Cops Can Search Your Phone Whenever They Want, If You're Within 100 Miles of the Border

Elizabeth Nolan Brown Yahoo Entertainment

'Cryptomining can be a lucrative post-compromise activity in cloud environments': Experts warn AI gateways connected to Amazon Bedrock are being hijacked to steal crypto

Sead Fadilpašić TechRadar

Lessons Learned from CISA’s Recent GitHub Leak

BrianKrebs Krebs on Security

China, Russia and Others Seek To Inflame Debate Over AI Data Centers

BeauHD Slashdot.org

Lenovo denies using banned Chinese SSDs where they're not allowed

Simon Sharwood Theregister.com

99.9% of fixable AI vulnerabilities remain unpatched

Anamarija Pogorelec Help Net Security

Ryuk Ransomware Member Pleads Guilty Over Attacks on U.S. Organizations

Pierluigi Paganini Securityaffairs.com

Croc: Securely transfer files and folders between two computers

schollz Github.com

Grid War: How Geopolitics And Anxiety Drive Home Solar

Ken Silverstein, Senior Contributor, Ken Silverstein, Senior Contributor https://www.forbes.com/sites/kensilverstein/ Forbes

Ronald Reagan's Landmark Cybersecurity Policies Were Influenced By A Classic '80s Techno-Thriller

staff@bgr.com (Daniel Trock) BGR

Microsoft's patch for a Windows Defender 0-day may have created a new attack path

Alfonso Maruccia TechSpot

'I'm dying laughing' - what leaked messages tell us about global hacking gang

Geoff White - BBC Cyber Hack podcast BBC News

Week in review: Accenture data breach, great open-source cybersecurity tools

Help Net Security Help Net Security

'The false attributions were the direct product of Koi’s unsupervised reliance': Startup sues Koi Security after AI tool hallucinates and links it to a Chinese spying scam

Efosa Udinmwen TechRadar

Security Affairs newsletter Round 585 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Los Angeles police pause Flock's surveillance of everyday life

Jason Weisberger Boing Boing

Can the government see us through our phone cameras?

Ava Reynolds Lifesciencesworld.com

Medical Technology Firm Confirms Data Breach That Impacted Data of 3,834,294 Americans

Daily Hodl Staff The Daily Hodl

TPM Device Not Detected in Windows 11: How to Fix It (2026)

Aseem Kishore Helpdeskgeek.com

A VPN Can Only Protect Your Privacy So Much. Here’s What to Consider

Krishi Chowdhary CNET

Hackers Weaponize Balochistan Police Portal in Multi-Group Espionage Campaigns

info@thehackernews.com (The Hacker News) Internet

This ransomware negotiator was paid to fight hackers, he was secretly working with them instead

Skye Jacobs TechSpot

Ford’s latest anti-theft measure stops thieves from starting your car

Jonathan Lamont MobileSyrup

3 Reasons Why Your Website Needs Regular Maintenance

Anthony Savino Entrepreneur

This Week in Security: Escaping Linux VMs, Vulnerable Solar, Confusing AI (Again), and Confusing NPM Malware

Mike Kershaw Hackaday

Hackers Use Fake Microsoft Entra Passkey Enrollment to Gain Microsoft 365 Access

info@thehackernews.com (The Hacker News) Internet

NHS Warns Staff Over Unauthorized Access to Patient Data

Phil Muncaster Infosecurity Magazine

RoguePlanet let hackers take over your PC. Microsoft just patched it

Mikael Markander, Laura Pippig PCWorld

Hackers tried to backdoor Injective npm package to steal wallet keys

Cointelegraph by Martin Young Cointelegraph

World Cup Propels Surveillance To New Heights

Anne Toomey McKenna Techdirt

Injective SDK on npm infected with cryptocurrency wallet stealer

Bill Toulas BleepingComputer

Quote of the day by NSA Whistleblower Edward Snowden on the 'nothing to hide' argument: 'No different than saying you don't care about free speech because you have nothing to say'

Keumars Afifi-Sabet TechRadar

Browser Fingerprinting – How websites track you across internet –without cookies

MySysInfo Mysysinfo.com

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

The 4 Security Companies That Earn Highest Marks for Data Protection

Tyler Lacoma CNET

My burner email blocklist blocked me

Benjamin Piouffle Piouffle.com

DLSS Swapper creator issues malware warning over user-submitted DLL libraries

Alfonso Maruccia TechSpot

I finally tried Tailscale, and now I get the hype

Yadullah Abidi MakeUseOf

Is It Safe to Host HTML That Runs Its Own JavaScript?

ShareMyPage Sharemypage.app

Fake 7-Zip Installers Turn Devices Into Residential Proxy Nodes

info@thehackernews.com (The Hacker News) Internet

This antivirus doesn’t slow your PC down — it quietly keeps it safe for $19.99

DealPost Team PCWorld

Google's new remote attestation scheme is every bit as terrible as its old remote attestation scheme

Cory Doctorow EFF

What's the best way to do authentication in modern applications

Neciu Dan Neciudan.dev

Ray-Ban Meta privacy problems go from bad to worse with nightmarish 'super sensing' feature

Andy Boxall Android Police

SCMBANKER Malware Uses ClickFix Lures to Target Mexican Banking Users

info@thehackernews.com (The Hacker News) Internet

I audited my Windows laptop on hotel Wi-Fi and was shocked by what it exposed

Gregory Gibson MakeUseOf

NATO taps Accenture and Leonardo to build a €200M secure cloud backbone

Ana-Maria Stanciuc The Next Web

Experts warn of the 'first documented case of agentic ransomware' — dangerous JADEPUFFER attack run entirely by an LLM

Christian Cawley TechRadar

Cybersecurity and the Gap Between Skill and Ability

Bruce Schneier Schneier.com

CISA Adds 4 Actively Exploited Adobe, Joomla, and Langflow Flaws to KEV

info@thehackernews.com (The Hacker News) Internet

Orbia CISO Miranda Ritchie on building security into sustainable infrastructure

Mirko Zorz Help Net Security

Bitdefender Identity Theft Protection review

Krishi Chowdhary TechRadar

Victims of 23andMe data breach to get $47m payout, judge rules

https://www.facebook.com/bbcnews BBC News

CISA Deploys Anthropic’s Mythos AI to Hunt Vulnerabilities in U.S. Government Code

Pierluigi Paganini Securityaffairs.com

7 Habits That Are More Important Than Using Antivirus on Your Phone

Marshall Gunnell CNET

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

info@thehackernews.com (The Hacker News) Internet

Cloud Storage Vs. Local Storage: Is One Safer For Your Personal Data?

staff@bgr.com (Kyle Schurman) BGR

How To Create a Multi-Layered Security Setup for All Your Devices

AndroidGuys AndroidGuys

Cybersecurity jobs available right now: July 7, 2026

Anamarija Pogorelec Help Net Security

Someone made an ESP32 passwordless fingerprint unlocker, and you can make one at home

Simon Batt XDA Developers

AI agent exploits Langflow in first fully autonomous ransomware attack

Duncan Riley SiliconANGLE News

India Proposes Stricter VPN Regulations Requiring Local Offices, Compliance Officers

Douglas Harrington Naturalnews.com

Complete Google Chrome Privacy Audit: Securing Passwords, Payments, and History

Dinsan Chromestory.com

Enhance your password security with up to 50% off Keeper plans — secure credential generation, storage, and autofill to help protect all your online accounts

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

Alleged Operators of HiAnime Piracy Ring Arrested in Vietnam with U.S. Support

Ernesto Van der Sar Torrentfreak.com

Planned obsolescence is now a Windows PC security nightmare

Alaina Yee PCWorld

New Java-Based QuimaRAT MaaS Built to Run on Windows, Linux, and macOS

info@thehackernews.com (The Hacker News) Internet

Researchers Claim First Fully Agentic Ransomware: JadePuffer

Phil Muncaster Infosecurity Magazine

When checking the URL isn’t enough: a Device Code Phishing attack via a Microsoft website

Roman Dedenok Securelist.com

The Threat Landscape Has Evolved to Target Your Data, Not Just Your Devices

Dianna Gunn CNET

Why DMARC's new "NP" tag can fail with DNSSEC

Matteo Dmarcwise.io

Prioritize GPS or Risk Losing Future Wars

Felix Miller Daily Signal

Fake Mac Clipboard App Delivers New Password-Stealing Malware

Jason Nelson Decrypt

Texas State Agency Breach Exposes Driver’s Licenses and Passports of 3 Million Residents

Daily Hodl Staff The Daily Hodl

VeraCrypt Portable 1.26.29 (free disk encryption) Released

John T. Haller Portableapps.com

Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attack

Help Net Security Help Net Security

iPhone 18 Pro Leaks Reveal Apple’s Move to an Ultra-Efficient 2Nm Chip

Roland Hutchinson Geeky Gadgets

Tasmania moves to ban 'disgraceful' non-consensual sharing of sexual imagery

Crystal McKay ABC News (AU)

Alibaba Bans Claude Code: The Backdoor Scare Explained

Matt Mickiewicz SitePoint

‘You fix it by making the secure option just as fast and frictionless as the risky one’: Practical advice on addressing shadow AI

desire.athow@futurenet.com (Desire Athow) , Desire Athow TechRadar

Security Bite: A note on camera covers in 2026

Arin Waichulis 9to5Mac

BareMetal RAM Dumper – Bare-metal x86 tool for Cold Boot Attack experiments

pIat0n Github.com

North Korean Hackers Publish 108 Malicious Packages and Extensions in PolinRider Campaign

info@thehackernews.com (The Hacker News) Internet

FBI: TeamPCP Compromised Dev Tools to Steal Cloud Credentials

Pierluigi Paganini Securityaffairs.com

Soatok's Informal Guide to Threat Models

View Archive → Soatok.blog

Cybersecurity in space: Protecting the next frontier of critical infrastructure

Dr. Tim Sandle Digital Journal

This Week in Security: Windows 10 Gets Another Year, SmartTV Botnets, Hiding Payloads, and LastPass Customer Leak

Mike Kershaw Hackaday

The most important file in my password manager isn't a password

Gavin Phillips MakeUseOf

North Korea-Linked npm Packages Mimic Rollup Polyfills to Steal Developer Secrets

info@thehackernews.com (The Hacker News) Internet

India plans VPN crackdown

Faster and further reaching — NordVPN quietly brings its obfuscated servers to its in-house censorship-resistant protocol

monicajwrites@gmail.com (Monica J. White) , Monica J. White TechRadar

EU Politicians Investigated Pegasus Spyware. Then It Ended Up on One of Their Phones

Lily Hay Newman, Matt Burgess Wired

EU lawmaker investigating surveillance hacked by Israeli spyware, report says

Erin Hale, John Power Al Jazeera English

Organizations struggle to prioritize known cyber risks

Anamarija Pogorelec Help Net Security

iOS 27 helps apps detect when a user may be getting scammed in real time

Marcus Mendes 9to5Mac

Malware found spreading through sponsored ads on X

Arin Waichulis 9to5Mac

I finally understand why Microsoft made TPM mandatory

Tashreef Shareef MakeUseOf

Incogni Review: Comprehensive and Transparent Data Removals

Zachary McAuliffe CNET

Cybersecurity Mission Creep in the US

Bruce Schneier Schneier.com

T-Mobile is about to eliminate a major vulnerability from its network

Aamir Siddiqui Android Authority

Alleged Scattered Spider Member Extradited to US

Phil Muncaster Infosecurity Magazine

Opera’s new Paste Protect feature blocks suspicious commands copied from websites

Marcus Mendes 9to5Mac

AI-Generated Browser Ransomware Abuses Chromium API on Windows and Android

info@thehackernews.com (The Hacker News) Internet

Apple Hide My Email Vulnerability Exposes Real Email Addresses

Hartley Charlton MacRumors

6 security settings every GitHub maintainer should enable this week

Natalie Guevara Github.blog

Ditch Email Attachments - Here's An Easier Way To Share Files

staff@bgr.com (Daniel Trock) BGR

OpenClaw: risks for agent users and how to mitigate them

Kaspersky Securelist.com

Apple Crackdown Suspected After iPhone 18 Pro Leak Videos Disappear

Tim Hardwick MacRumors

A critical exploit bypasses Microsoft Defender in Windows 11 and Windows 10 — so much for "everyday risk protection without additional software"

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Silent Swap Crypto Clipper Uses Fake Google Notes Extension to Replace Wallet Addresses

info@thehackernews.com (The Hacker News) Internet

Beyond Prompt Injection

Shania Rasheed Nalagath Oreilly.com

Please don't use the free movie hack that everyone's sharing

Gavin Phillips MakeUseOf

Hacking a Reverse Osmosis Water Filter Through its Smart Faucet

Maya Posch Hackaday

Apple iPhone 18 Pro secrets leaked in Tata Electronics hack: What we know

Marthe van der Wolf Al Jazeera English

mssPortable 1.453.345 (Microsoft Safety Scanner antivirus launcher) Released

John T. Haller Portableapps.com

Prediction markets paragraphs to ponder

Tyler Cowen Marginalrevolution.com

How And Why To Fight Back Against Social Media Bans

Molly Buckley Techdirt

Apple accelerates security updates in response to AI-powered hacking risks

Marcus Mendes 9to5Mac

ZachXBT Accuses KuCoin of Pressuring Hack Victim and Using Fake KYC Accounts

Nana K. Bitcoinfoundation.org

LGBT Q&A: What Data Are Companies in the UK Collecting When Verifying My Age?

Paige Collings, Erica Portnoy EFF

Linux isn't immune to malware — the AUR just proved it

Dipan Saha MakeUseOf

236,000 DCloud Uni-App Sites Used in Crypto Scams, Phishing, and Wallet Drainers

info@thehackernews.com (The Hacker News) Internet

Supreme Court restricts use of geofence warrants

Nina Totenberg NPR

Factoring RSA Keys with Many Zeros

Bruce Schneier Schneier.com

‘Free’ World Cup streams are spreading scams, not soccer

Alaina Yee PCWorld

Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python Infostealer

info@thehackernews.com (The Hacker News) Internet

Boss Tracks Employees Using The Same App He Uses On His Kids, Threatens Them With Fines: “So So So Wrong”

Kotryna Br Boredpanda.com

Amazon S3 server access logs now deliver to Amazon CloudWatch Logs and Amazon S3 Tables

aws@amazon.com Amazon.com

Process Monitor Portable 4.04 (real-time file, registry and process monitor) Released

John T. Haller Portableapps.com

Telling internet platforms where to stick public service media will serve nobody. Turn it on its head

Rupert Goodwins Theregister.com

Watch out — that income tax form could actually be dangerous malware

Efosa Udinmwen TechRadar

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 103

Pierluigi Paganini Securityaffairs.com

RF Hacking A Ceiling Fan Via The Remote

Zoe Skyforest Hackaday

Data breach exposes up to 14.2 million email logins at six ISPs

Bill Toulas BleepingComputer

The biggest privacy leak in my living room was the TV itself

Pankil Shah MakeUseOf

Week in review: Fortibleed campaign’s impact on orgs, Cisco Unified CM flaw exploited

Help Net Security Help Net Security

Germany’s spy agency comes in from the cold

Sam Jones The Irish Times

How schools breach children’s data privacy: A snapshot

Pratishtha Bagai The Times of India

Security News This Week: LastPass Users Had Their Data Stolen—Again

Lily Hay Newman Wired

Clean GitHub repo tricks AI coding agents into running malware

Bill Toulas BleepingComputer

New FBI Alert: Russian Intelligence Uses Signal Recovery Keys to Access Messages

Pierluigi Paganini Securityaffairs.com

Five reasons why I use an email alias, and you should too

Dhruv Bhutani Android Authority

Job scams are getting more sophisticated, and they’re costing Americans millions

Jacqueline Munis Fortune

Chinese Framework Powers 200,000 Scam Sites

Ionut Arghire Securityweek.com

Stop cyber threats before they reach your PC with Bitdefender Antivirus Plus for $19.99

Stack Commerce Popular Science

Post-Mythos Cybersecurity: Keep calm and carry on

Morgan Hotonnier Cephalosec.com

Even the Secret Service won't use company-issued phones

Jessica Lyons Theregister.com

His Tinder Match Was Going Great — Then She Offered to Teach Him Crypto Trading and Something Felt Off

Jayne Elliott Twistedsifter.com

US bans imports of more Chinese technology goods

By David Shepardson Yahoo Entertainment

Cloudflare – China Digital Times and the Fight Against Censorship

CC Cloudflare.com

How Android privacy threats are evolving — and how Bitdefender helps keep control in your hands

tips@androidcentral.com (Sponsored) , Sponsored Android Central

Alan Turing’s Remarkable, Nearly-Forgotten Voice Encryption Device

Donald Papp Hackaday

Chinese-Speaking APT Deploys New TinyRCT Backdoor in Southeast Asia Campaign

info@thehackernews.com (The Hacker News) Internet

NAIC confirms data breach with ShinyHunters claiming 3.1TB of data stolen in Oracle zero-day attack

Sead Fadilpašić TechRadar

Captcha proves you're human. HATCHA proves you're not

mondaycom Github.com

Google Details Turla's New STOCKSTAY Backdoor Used in Ukraine Espionage Attacks

info@thehackernews.com (The Hacker News) Internet

ZeroTier Quantum RC2 brings post-quantum security closer to general availability

Industry News Help Net Security

The 'papers, please' era of the internet will decimate your privacy

Sarah McLaughlin Fire.org

Primed for Malware: Stop Selling Compromised Android Devices

Alexis Hancock EFF

Security boss thought MFA would be too much security

Simon Sharwood Theregister.com

Akrites: The Latest Attempt to Protect Open-Source From AI Attacks Has Arrived

Steven J. Vaughan-Nichols DevOps.com

ThreatsDay Bulletin: Smart TV Proxyware, 24-Year curl Bug, AI Crime Forums + 13 More Stories

info@thehackernews.com (The Hacker News) Internet

'27 million stolen login credentials have been recovered': Global coordinated takedown hits SocGholish, Amadey, and StealC malware networks where it hurt

Sead Fadilpašić TechRadar

The FCC’s Spam Call Proposal Is Just a Data Collection Scheme

Chao Liu, Cooper Quintin EFF

Mitiga unveils Agentic Runtime Security for cloud, SaaS, identity, and AI protection

Industry News Help Net Security

New Mistic Backdoor Linked to KongTuke in ClickFix and ModeloRAT Campaigns

info@thehackernews.com (The Hacker News) Internet

Elite network says it was hacked after members’ personal data was left exposed

Danny Bradbury Malwarebytes.com

Stellar Cyber improves threat detection and data onboarding in new updates

Industry News Help Net Security

CRM compliance: What it is and how to nail It with your team & tech

rsukhraj@hubspot.com (Ramona Sukhraj) Hubspot.com

Amadey and StealC Malware Network Disrupted, 27M Stolen Credentials Recovered

info@thehackernews.com (The Hacker News) Internet

Exploiting vulnerabilities in Johnson and Johnson web apps

Eaton Eaton-works.com

Windows updated Secure Boot just in time. Here’s what happened

Joel Lee PCWorld

Another LastPass security breach traces back to a compromised vendor

Jay Bonggolto Android Authority

LastPass notifies users of yet another data breach

Marcus Mendes 9to5Mac

GitHub Is Becoming a Giant AI Code Dump

MAREF Engineering Maref.cc

PCI Compliance Isn’t a Checkbox: How to Secure Ecommerce Checkouts Before Attackers Arrive

Kyle Knight Sucuri.net

DigiCert brings independent trust validation to confidential computing environments

Industry News Help Net Security

There's a 30-second change that makes public Wi-Fi noticeably safer — and it costs nothing

Jorge Aguilar MakeUseOf

Agentic AI: The Weapon That No Longer Needs a Warrior

info@thehackernews.com (The Hacker News) Internet

Why I abandoned LastPass after moving my passwords to this Bitwarden setup

Rahul Naskar Android Police

Scattered Spider Hackers Plead Guilty on Day 1 of Trial

BrianKrebs Krebs on Security

Confidential Apple Files Leaked on Dark Web After Supplier Cyberattack

Tim Hardwick MacRumors

Your smart home may be whispering your secrets to strangers

Alaina Yee PCWorld

How 100 Romanian hospitals switched to pen and paper to defeat a national cyber-attack

Joe Tidy - Cyber Correspondent, World Service BBC News

Here's What 'Military-Grade' Encryption Really Means

staff@bgr.com (Alan Bradley) BGR

Free, no-signup World Cup streams serve scams instead of football

Sinisa Markovic Help Net Security

Rickrolling the World Cup

Navarre Bartz Hackaday

New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer

info@thehackernews.com (The Hacker News) Internet

FTC Warning: Crypto ATM Scams Up 1,000%—How To Protect Yourself

Steve Weisman, Contributor, Steve Weisman, Contributor https://www.forbes.com/sites/steveweisman/ Forbes

Microsoft scrambles to patch a Defender security flaw called RoguePlanet

Mikael Markander, Hans-Christian Dirscherl PCWorld

WhatsApp's "End-to-End Encryption" Is the Biggest Lie in Tech History

Adrian Găitan Medium

AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network

info@thehackernews.com (The Hacker News) Internet

Encrypted DNS still tells an eavesdropper where to look

Mirko Zorz Help Net Security

4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger malware

Pierluigi Paganini Securityaffairs.com

Security Affairs newsletter Round 582 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

AryStinger botnet infected thousands of D-Link routers worldwide

Bill Toulas BleepingComputer

I benchmarked Quad9, NextDNS, and Cloudflare, and the winner wasn't the big name

Gavin Phillips MakeUseOf

Study Reveals Exploit That Lets Your Browsing History Be Spied On Using Your SSD

staff@bgr.com (Aaron Greenbaum) BGR

A Critical Deadline Is Approaching for Windows and Linux Security

Dan Goodin, Ars Technica Wired

Malware Has Gotten Smarter. Here's How Your Antivirus Has, Too

Marshall Gunnell CNET

Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack

Help Net Security Help Net Security

Deal Days has a 15-device VPN for less than $30

Boing Boing's Shop Boing Boing

These AI Scams All Have Red Flags. Here's How to Spot Them

Dianna Gunn CNET

As an Android expert, here are 5 popular apps I don’t recommend downloading

Pankil Shah Android Authority

Nintendo confirms data stolen via third-party cyberattack — but sadly no big secrets were revealed

Sead Fadilpašić TechRadar

Optimizing Microsoft Defender Antivirus update delivery and fallback order

IT News 4sysops.com

Investigation Into Alleged Kate Middleton Medical Records Sale Scheme Ends In “Formal Caution”

Valentine Ulgu-Servant Vanity Fair

Lithuanian startup launches open-source network to detect Shahed-type drones

LRT.lt Www.lrt.lt

CISA Warns of Active Exploitation Following FortiBleed Leak

Pierluigi Paganini Securityaffairs.com

This Week in Security: Arch AUR, Steam Marketplace, WordPress All Face Issues, Taco-Themed Coding, and Mythos Makes National News

Mike Kershaw Hackaday

Everything's bigger and better in Texas – even data breaches

Connor Jones Theregister.com

From Assistive to Agentic: The AI Shift That's Redefining Threat Management

info@thehackernews.com (The Hacker News) Internet

The Most Dangerous Surveillance Bill You’ve Probably Never Heard Of

Geeks are Sexy Geeksaresexy.net

4 security upgrades in Android 17 you didn’t know about, but will be glad to have

Robert Triggs Android Authority

Canada Is Forging Ahead with Its Dangerous Surveillance Bill

Thorin Klosowski EFF

Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data

info@thehackernews.com (The Hacker News) Internet

The Steam Workshop Is Being Used To Spread Malware To Thousands Of Users

staff@bgr.com (Aaron Greenbaum) BGR

Your browser tab could become encrypted storage for someone else’s files

Mirko Zorz Help Net Security

100 days after the Iran war started — Tehran-backed group breaches California Water Service but claims they 'chose not to disrupt water access'

Efosa Udinmwen TechRadar

I found 10k GitHub repositories distributing Trojan malware

Orchid Orchidfiles.com

‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm

BrianKrebs Krebs on Security

The Scripts on Your Checkout Page Are Now a PCI DSS Problem

info@thehackernews.com (The Hacker News) Internet

'This creates a misleading impression of safety': Experts warn of hackers hijacking legitimate news websites and reviews to drum up publicity

Sead Fadilpašić TechRadar

Securing the Future of AI Agents

Rohin Shah, Four Flynn Deepmind.google

Embedding Forbidden Text in Spyware to Discourage AI Analysis

Bruce Schneier Schneier.com

The enemy within: how to stop a simple Teams message taking down your business

Andrea Sivieri TechRadar

Cybercrime Surges in APAC as Digitalization Takes Hold

Phil Muncaster Infosecurity Magazine

Crypto Clipper uses Tor and worm-like propagation for persistence and control

Microsoft Defender Security Research Team and Microsoft Defender Experts Microsoft.com

How security teams are getting credential visibility into developer endpoints

Help Net Security Help Net Security

Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development

Pierluigi Paganini Securityaffairs.com

124 million passwords added to breach database. Yours may be in there, too

Viviane Osswald PCWorld

Gamers beware — experts flag Steam Workshop is being abused to spread malware via Wallpaper Engine app

Sead Fadilpašić TechRadar

Nintendo Acknowledges Employee Data at Risk After Third-Party Service Breach

Tom Phillips IGN

How Did the Feds Get Into Anti-ICE Activists’ Signal Messages?

Nikita Mazurov The Intercept

Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot Chats

info@thehackernews.com (The Hacker News) Internet

Surfshark VPN review: Affordable protection with solid performance

Tyler Cooper Salon

Python Software Foundation: Everything Security at PyCon US 2026

Seth Michael Larson Blogspot.com

AMD silently removes memory encryption from consumer Ryzen CPUs, leaving users unaware that they may be vulnerable — security feature vanishes after newer AGESA firmware, AMD engineers go radio silent when pressed about the change

Etiido Uko Tom's Hardware UK

Russian Spam and Profanities Are Now Plaguing the Arch Linux AUR

BeauHD Slashdot.org

ClickFix Campaigns Expand Malware Delivery With New Loaders and Fake Update Lures

info@thehackernews.com (The Hacker News) Internet

Apple Details Terminal Anti-Scam Warning in macOS

Tim Hardwick MacRumors

US Limits on Anthropic Fable AI Could Hurt Cybersecurity

Chris Stokel-Walker Scientific American

The UK’s Most Unpopular Government on Record Just Went All-In On Digital Surveillance, Censorship and Control

Nick Corbishley Nakedcapitalism.com

The FBI says it’s already seized 13 drones in Atlanta near World Cup stadiums — and pilots could face fines up to $100,000 if they don’t follow these new rules

Sam Kieldsen TechRadar

What Can Hackers Do With Your Phone Number? What To Know

Joe McKendrick, Senior Contributor, Joe McKendrick, Senior Contributor https://www.forbes.com/sites/joemckendrick/ Forbes

Chinese Hackers Abused Google Workspace Rules to Steal Research and Defense Emails

info@thehackernews.com (The Hacker News) Internet

DOGE whistleblower's brake line was cut after Musk posted about him on X: Timeline of what we know

Taija PerryCook Snopes.com

Why your help desk is still your biggest security risk

Greg Nelson TechRadar

2021 Honda Civic infotainment system can be jailbroken via USB — flaw uses public Android test keys to install unauthorized apps, enables for 'EvilValet' attacks

editors@tomshardware.com (Jowi Morales) , Jowi Morales Tom's Hardware UK

Crown alleges man accessed $5.7m dark web bitcoin to buy home

Jacinta Counihan ABC News (AU)

152 Chrome Wallpaper Extensions with 105K Installs Linked to Adware and Fake Traffic

info@thehackernews.com (The Hacker News) Internet

Modat enhances Magnify with Passive DNS for faster threat hunting and infrastructure analysis

Industry News Help Net Security

What If It All Came Out?

Bridget Read New York Magazine

FBI disrupts massive AI-powered phishing service using a million URLs

Bill Toulas BleepingComputer

Upcoming Speaking Engagements

B. Schneier Schneier.com

Privacy as a Fundamental Right? The Government’s Terrible Privacy Track Record Suggests Virtue Signalling Over a Genuine Commitment

Michael Geist Michaelgeist.ca

‘Nothing works’: Russians react as intelligence services shut down the internet

Anastasia Stognei and Max Seddon The Irish Times

Week in review: Exploited Check Point VPN zero-day, Oracle PeopleSoft servers under attack

Anamarija Pogorelec Help Net Security

10th Gen Honda Civic Updates Are Signed with AOSP Test Keys

Eric McDonald Juniperspring.org

Ukrainian Extradited from Ireland Pleads Guilty Over Role in Conti Ransomware Scheme

Pierluigi Paganini Securityaffairs.com

How To Avoid Text Scams And Spot Red Flags Early

Anisha Sircar, Contributor, Anisha Sircar, Contributor https://www.forbes.com/sites/anishasircar/ Forbes

4 security features I always set up on every new Android phone, and you should too

Pankil Shah Android Authority

Chinese hackers hijack auth flow, spy on isolated network for a decade

Bill Toulas BleepingComputer

'WhatsApp Gold' is real scam, but 'Martinelli' video allegedly spreading hoax doesn't exist

Megan Loe Snopes.com

Iran-Linked Handala Breached a California Water Utility. It Could Have Done Worse, and It Knows That.

Pierluigi Paganini Securityaffairs.com

Arch Linux Now Believes Malware Incident Under Control: More Than 1,500 Affected Packages

Michael Larabel Phoronix

This Week in Security: Microsoft on Microsoft, Register Your Domains, Linux on ARM, and FreeBSD Joins the File Cache Club

Mike Kershaw Hackaday

Hades malware campaign tricks AI scanners with fake nuclear weapon prompts — malicious code triggers safety failsafes so scanners skip the payload

editors@tomshardware.com (Bruno Ferreira) , Bruno Ferreira Tom's Hardware UK

How the gaming and gambling industry can strengthen their cyber defenses

Sam Peters TechRadar

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

info@thehackernews.com (The Hacker News) Internet

Comcast Business SecurityEdge Preferred strengthens security for small businesses

Industry News Help Net Security

Digital Sovereignty Becomes an Imperative as the US Reads Dutch Emails

Kevin Korte Korte.co

Android apps track you by default — this free app tells you how bad it really is

Gavin Phillips MakeUseOf

Pokémon GO scan controversy resurfaces after Niantic Spatial defense partnership

Paul McNally The Escapist

INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator

info@thehackernews.com (The Hacker News) Internet

UGH! Here Comes Another New ‘Free iPhone’ Scam

Chris Hauk Mactrast.com

UpdraftPlus WordPress Vulnerability Puts 3 Million Sites At Risk via @sejournal, @martinibuster

Roger Montti Search Engine Journal

Signal Alums Reveal ‘Encrypted Spaces,’ a System for Making Private Collaboration Apps

Andy Greenberg Wired

AI Broke Vulnerability Management. That's Why CISOs Are Moving Budget to BAS.

info@thehackernews.com (The Hacker News) Internet

Hackers are using TikTok videos offering 'free Spotify Premium' to spread malware and steal passwords

Craig Hale TechRadar

What Does Encrypted Mean on iMessage?

Eden Gordon Mental Floss

Your browser is too nosy. Change these 5 settings now

Steffen Zellfelder PCWorld

How the UK is tackling industrialized crypto fraud

Jordan Wain TechRadar

Threat actors are recruiting the people who hold cloud logins

Anamarija Pogorelec Help Net Security

JDY Botnet Evolves After KV Takedown, Targets Military Networks

Pierluigi Paganini Securityaffairs.com

South Korea fines Coupang $408m over biggest data leak in country’s history

Al Jazeera Al Jazeera English

The iPad was on Tailscale: a WebRTC debugging story

p2claw P2claw.com

Your router's most questionable setting is probably still enabled, exposing your Wi-Fi to hackers

Tanveer Singh XDA Developers

The quantum clock is ticking: it's Bitcoin's problem, not Ethereum's

Samir Tabar CoinDesk

Hackers used Meta AI to expose over 34,000 Instagram accounts, but Meta isn’t slowing down

Shimul Sood Android Authority

I replaced Pi-hole with Unbound for a week, and the privacy upgrade wasn't the only win

Shekhar Vaidya XDA Developers

Microsoft Patches Record 206 Flaws, Including Three Zero-Days and Critical RCE Bugs

info@thehackernews.com (The Hacker News) Internet

Pros and cons of using a VPN

Jared Howe Salon

Apple's AI Can Now Change Your Passwords. What Could Possibly Go Wrong?

Kyle Reddoch Kylereddoch.me

Windscribe now accepts cash for VPN subscriptions — but admits the process is 'the slowest, riskiest way to pay'

Rene Millman TechRadar

This paint app didn't own the domain that matches its name for 22 years

Simon Batt XDA Developers

North Korean Hackers—Posing As Fake IT Workers—Behind Nearly Half Of All Tech Firm Attacks, Report Says

Ty Roush, Forbes Staff, Ty Roush, Forbes Staff https://www.forbes.com/sites/tylerroush/ Forbes

This New Computer Virus Is Disguising Itself As A Popular Video Game

staff@bgr.com (Aaron Greenbaum) BGR

Hades PyPI Attack: 19 Packages Poisoned to Auto-Run Bun Credential Stealer

info@thehackernews.com (The Hacker News) Internet

Voice is the next cybersecurity battleground, and AI is accelerating the risk

Mark Himelfarb TechRadar

Python Bytes: #483 Thanks Brian

Michael Kennedy (@mkennedy) Pythonbytes.fm

There’s a devious new free phone scam, to add to the lengthy list

Ben Lovejoy 9to5Mac

Meta Blocks NSO Group's New WhatsApp Phishing Attack, Files Contempt Order

info@thehackernews.com (The Hacker News) Internet

UNC3753 Used Vishing and Physical Intrusions in U.S. Data Theft Extortion Campaign

info@thehackernews.com (The Hacker News) Internet

Black Market Tinkerers on Facebook Marketplace Offer to Hide 'Recording Lights' on Meta Smartglasses

EditorDavid Slashdot.org

When attacks spread too far: Lessons from real cyber attack case studies

Help Net Security Help Net Security

Fighting Spyware: An Update From WhatsApp

Facebook Fb.com

Why sovereignty has become the new measure of cyber resilience

Warren O’Driscoll TechRadar

Security Affairs newsletter Round 580 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast

Help Net Security Help Net Security

PSA: Incognito Mode Doesn't Totally Hide Your Online Activity

Nelson Aguilar CNET

Why Autonomous Robot Dogs Are Becoming a National Security Threat

Julian Horsey Geeky Gadgets

The Clock Is Already Ticking: Why Post-Quantum Cryptography Can’t Wait

Michael Wright Imperva.com

U.S. Treasury Sanctions Iran’s Nobitex Crypto Exchange Amid Regional Conflict

Sterling Ashworth Naturalnews.com

The Smart TV in Your LivingRoom Is a Node in the AIScraping Economy

buchodi Includesecurity.com

Meta confirms 1000s of Instagram accounts were hacked by abusing its AI chatbot

Zack Whittaker Weekinsecurity.com

Apple @ Work: How zero-touch enrollment killed the market for stolen corporate devices

Bradley C 9to5Mac

Critical Everest Forms Pro flaw exploited to take over WordPress sites

Bill Toulas BleepingComputer

Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI

info@thehackernews.com (The Hacker News) Internet

The US Military Quietly Turned GPS Into a Global 'Numbers Station,' Evidence Suggests

BeauHD Slashdot.org

[2606.03811] AI Agents Enable Adaptive Computer Worms

pythoneer Arxiv.org

Claude Opus Found a Four-Year-Old Hole in Zcash’s Privacy Layer. Nobody Knows If Someone Already Used It.

Pierluigi Paganini Securityaffairs.com

ChatGPT just gave Free users a powerful defense against prompt injection attacks

Simon Batt XDA Developers

Researchers build autonomous AI worm that can reason and adapt

Alissa Irei Techtarget.com

The Empty Field That Wasn't: GPS, OTAD and Two Decades of Encrypted Broadcasts

Steven J. Murdoch Benthamsgaze.org

What happens when your phone is confiscated at the airport

Gaby Del Valle The Verge

U.S. Military Turned GPS into a Global "Numbers Station"

Becky Ferreira 404media.co

IronWorm and New Miasma Worm Variant Hit npm in Supply Chain Attacks

info@thehackernews.com (The Hacker News) Internet

Your Google Pixel Is Getting Smarter At Detecting Scam Calls

staff@bgr.com (Alan Bradley) BGR

Mantine-datatable (and others) compromised – owner account suspended

icflorescu Github.com

Canada’s Bill C-22: Why Signal, Apple, and top VPNs are fighting the 'surveillance' law

chiara.castro@futurenet.com (Chiara Castro) , Chiara Castro TechRadar

Unocoin Bitcoin theft case: Karnataka Police SIT names Congress MLA N A Haris’s son in chargesheet

Express News Service The Indian Express

"2,000 to 3,000 new hits every single day": Dangerous malware "WeedHack" hides in Minecraft mods, gives attackers webcam access, Steam and Discord passwords, and more

lowryb3865@gmail.com (Brendan Lowry) , Brendan Lowry Windows Central

The safest password is the one you never type

Gavin Phillips MakeUseOf

No data breach: IIT Roorkee rubbishes claims of privacy violation affecting JEE Advanced 2026 students

Education Desk The Indian Express

PCPJack Hijacks 230 AWS, Google Cloud, and Azure Servers for Covert SMTP Relay Network

info@thehackernews.com (The Hacker News) Internet

FBI Claims Google Employee Won Over $1M On Polymarket Bets Using Company Data

staff@bgr.com (Alec Hively) BGR

Amazon Cognito unlocks advanced capabilities with next-generation infrastructure

Howie Li Amazon.com

LinkedIn China Spying Threat Prompts Warning From US, Allies

BeauHD Slashdot.org

Infosecurity Europe: How Proton Fights Against Cybercriminals Using Its Services

Kevin Poireault Infosecurity Magazine

Anemoi Leak Caused by VisualArts Server Breach

Kite Stenbuck Siliconera

Nobody needs Mythos or 0-days to build a chaos-causing computer worm – free open source models work just fine

Jessica Lyons Theregister.com

The waitlist is not the control: Why frontier cyber AI needs business-side guardrails

Nik Kale TechRadar

Fake Sites Mimicking Open-Source Tools Rank High on Google to Deliver Malware via TDS

info@thehackernews.com (The Hacker News) Internet

This new AI-powered worm spreads itself and adapts in real time — here's how to stop it

Sara Heritage MakeUseOf

Infosecurity Europe: Raise Security Concerns with Procurement Now, Because Quantum Can’t Wait

Phil Muncaster Infosecurity Magazine

The modern-day business can learn a lot about risk from this year’s mega events

Help Net Security Help Net Security

Travel scams are everywhere. Here’s how to avoid them

Pieter Arntz Malwarebytes.com

Hacking Meta’s AI Chatbot

Bruce Schneier Schneier.com

Show HN: Rscrypto, pure-Rust crypto with industry leading public benches

loadingalias Github.com

Scientists just built a powerful AI computer worm that learns as it spreads

Jackie Flynn Mogensen Scientific American

Ultrahuman says recent security breach didn’t affect passwords or credit cards

Andrew Romero 9to5google.com

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

info@thehackernews.com (The Hacker News) Internet

Android Gets Fake Call Detection That Uses RCS

BeauHD Slashdot.org

Weedhack malware campaign infects 116,000 mod-hungry Minecraft players systems through SEO poisoning and YouTube

Sead Fadilpašić TechRadar

Argamal: Malware hidden in hentai games

Mikhail Reznichenko Securelist.com

Capstone – multi-platform, multi-architecture disassembly framework

Capstone Capstone-engine.org

One Step Forward, Two Steps Back: CA’s AB 1856 Exempts Open Source But Expands Age-Gating

Molly Buckley Techdirt

Huge Botnet Linked To Russia Infected Over 10 Million Devices Before Being Shut Down

staff@bgr.com (Alec Hively) BGR

Preinstall to persistence: Inside the Red Hat npm Miasma credential-stealing campaign

Microsoft Defender Security Research Team Microsoft.com

Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against Ukraine

info@thehackernews.com (The Hacker News) Internet

The Intersection of Encryption and AI

Bruce Schneier Schneier.com

Best VPN services for 2026

Tyler Cooper Salon

I can tell when my ISP is throttling my connection — here's the test

Jorge Aguilar MakeUseOf

The cyber risk framework protecting your organization wasn't built for this adversary

Jerry Caponera TechRadar

U.S. Midterms Have a Cyber Problem, but It's Not at the Ballot Box

lizwu@checkpoint.com Checkpoint.com

Attackers Hijack Red Hat npm Scope to Steal Cloud Secrets

Alessandro Mascellino Infosecurity Magazine

Sophos uncovers AI-powered malware lab built for EDR evasion

Sinisa Markovic Help Net Security

Red Hat npm Packages Compromised to Spread a Credential-Stealing Worm

BeauHD Slashdot.org

⚡ Weekly Recap: New Linux Flaw, PAN-OS Exploit, AI-Powered Attacks, OAuth Phishing and More

info@thehackernews.com (The Hacker News) Internet

The biggest cyber threats businesses face in 2026

Phil Lees TechRadar

Your antivirus could replace your VPN, password manager, and backup app

Chris Hoffman PCWorld

Security Bite Q1 Review: May 2026

Arin Waichulis 9to5Mac

Stop managing vulnerabilities and start managing scanner assumptions

Lexi Selldorff TechRadar

OpenAI Codex Authentication Tokens Stolen in codexui-android npm Supply Chain Attack

info@thehackernews.com (The Hacker News) Internet

What Is Social Engineering? How Hackers Exploit People, Not Systems

An Jay Smashingapps.com

Attackers Abuse ChatGPT Share Links to Host Fake Outage Pages That Deliver Malware

Arthur Kay Ghacks Technology News

Data discovery gaps that catch enterprises off guard

Mirko Zorz Help Net Security

US, Australia, and UK Plan New Unmanned Vehicles to Protect Undersea Data Cables

EditorDavid Slashdot.org

I designed cybersecurity content for a bank. I still almost got roped into two scams when job hunting.

Sarah E. Needleman Business Insider

Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flaw

Help Net Security Help Net Security

Dutch Authorities Dismantle Botnet Linked to 17 Million Infected Devices

info@thehackernews.com (The Hacker News) Internet

Iran reinstates some internet access but restrictions remain for most

Maziar Motamedi Al Jazeera English

Security Affairs newsletter Round 579 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Cybercrime Crew Claims It Hacked Mike Lindell’s MyPillow

Lily Hay Newman, Dell Cameron, Matt Burgess Wired

Your VPN is probably doing way more than you need it to — here's what actually matters

Jorge Aguilar MakeUseOf

U.S. says it seized about $1 billion in Iranian crypto as pressure campaign expands

Francisco Rodrigues, AI Boost CoinDesk

This cybersecurity course library includes over 90 classes for $50

Boing Boing's Shop Boing Boing

New Report Suggests Age Verification Service Used By PlayStation And Meta Is A Privacy Mess

Lewis Parker Kotaku

‘The moment infrastructure moves to orbit, that assumption disappears’: Layered access control, physical redundancy and rapid component replacement are major orbital challenges

desire.athow@futurenet.com (Desire Athow) , Desire Athow TechRadar

PAN-OS GlobalProtect Authentication Bypass (CVE-2026-0257) Under Active Exploitation

info@thehackernews.com (The Hacker News) Internet

Bitcoin’s biggest quantum risk may not be wallet keys. An early investor fears something bigger

Shaurya Malwa CoinDesk

Malicious npm packages abuse dependency confusion to profile developer environments

Microsoft Defender Security Research Team Microsoft.com

This Week in Security: Ubiquiti Fixes, and FreeBSD Joins the Club you Don’t Want to Join

Mike Kershaw Hackaday

Malicious Sicoob NuGet Steals Banking Credentials as npm Packages Target Cloud Secrets

info@thehackernews.com (The Hacker News) Internet

23andMe accused of failing to protect user data in new lawsuit

Katie Kindelan, Vera Drymon Abcnews.com

Microsoft warns GPU mining malware is being spread to users through SEO poisoning and AI chatbots — cryptojacking campaign targets gamers and high-end PC users with downloads disguised as popular PC utilities

Etiido Uko Tom's Hardware UK

Your Android phone has a hidden dashboard that shows which apps are spying on you

Megan Ellis XDA Developers

US troops are reportedly being targeted using location data, Pentagon says

Raphael Satter, Reuters Military Times

Closing the security blind spots that are a prime entry point for attacks

Yaz Bekkar TechRadar

Protestware for Coding Agents

Andrew Nesbitt Nesbitt.io

Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels

info@thehackernews.com (The Hacker News) Internet

What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistant

Yaroslav Shmelev, Anton Kivva, Denis Parinov, Vladimir Kuskov, Yanina Balandyuk-Opalinskaya Securelist.com

Canada vows to amend Bill C-22's encryption and metadata rules amid massive tech backlash

Rene Millman TechRadar

Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer

info@thehackernews.com (The Hacker News) Internet

Users report phishing emails coming from Microsoft’s system, and the company is digging in

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Carnival confirms ShinyHunters cruised off with 6M customer records after April breach

Connor Jones Theregister.com

You Should Not Update Your Dependencies

Olivier Gambier Mendral.com

Google Security Engineer Arrested in Million-Dollar Polymarket Trading Scheme

Kate Knibbs Wired

JINX-0164 Targets Cryptocurrency Firms with Fake Recruiter Lures and macOS Malware

info@thehackernews.com (The Hacker News) Internet

These are the 5 popular apps I switched to this year

Mitja Rutnik Android Authority

Pirates in the crosshairs: how one cybercrime gang has been infecting book, movie, and TV show fans for years

Konstantin Krasilnikov, Valery Akulenko, Artem Snegirev Securelist.com

GCHQ Chief Urges Action as AI Reshapes Cyber Threats

Alessandro Mascellino Infosecurity Magazine

I'm Getting into Mesh Networks (Meshtastic, MeshCore, and Reticulum)

Jonah Aragon Jonaharagon.com

Researchers find all big-name bots bomb EU compliance tests

Dan Robinson Theregister.com

GlassWorm Malware Takedown Disrupts Developer Supply Chain Attack Infrastructure

info@thehackernews.com (The Hacker News) Internet

Warnings about removed or unsupported Play Store apps could head to Android

nickodiaz@sbcglobal.net (Nickolas Diaz) , Nickolas Diaz Android Central

Charter Communications confirms data breach — ShinyHunters blamed after threat to leak user info online

Sead Fadilpašić TechRadar

AI Chatbot Recommendations Redirect Users to Cryptojacking Malware Sites

info@thehackernews.com (The Hacker News) Internet

Your PC’s trust in Windows has an expiration date

Hans-Christian Dirscherl PCWorld

'Underminr' CDN Vulnerability Hides Malicious Traffic Behind Trusted Domains

EditorDavid Slashdot.org

ExpressVPN is the cheapest way to ensure you're secure no matter where you celebrate Memorial Day 2026 — here's the best way to pick up a plan for yourself

Rob Dunne TechRadar

Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploited

Help Net Security Help Net Security

Meta sued for ‘misleading’ Texans over WhatsApp privacy

The FBI Wants ‘Near Real-Time’ Access to US License Plate Readers

Matt Burgess, Dell Cameron, Andrew Couts Wired

Apple @ Work: Why the ClickFix campaign means it is time to kill the 90 day update deferral

Bradley C 9to5Mac

Why pure extortion is replacing traditional ransomware

Pierluigi Paganini Securityaffairs.com

5 Easy Ways To Make Your Router More Secure

staff@bgr.com (Chifundo Kasiya) BGR

Oura says it gets government demands for user data. Will it share how many?

Zack Whittaker Weekinsecurity.com

Claude Mythos AI Finds 10,000 High-Severity Flaws in Widely Used Software

info@thehackernews.com (The Hacker News) Internet

Apple shares iPhone and Mac post-quantum cryptography code on GitHub

Marcus Mendes 9to5Mac

The sandworm malware strikes: How a hacker group stole 4,000 GitHub repositories and exposed the rot at the core of modern software security

Patrick Lewis Naturalnews.com

Trump Mobile Just Acknowledged The T1 Phone Database Leak Issue In The Worst Way Possible: Customers Still Not Notified

Rohail Saleem Wccftech

Drupal Core SQL Injection Bug Actively Exploited, Added to CISA KEV

info@thehackernews.com (The Hacker News) Internet

This Week in Security: AI Generated Reports, More AI Generated Reports, GitHub Chaos, and More Linux Vulnerabilities

Mike Kershaw Hackaday

Xfinity Customers Still Have Time to Claim a Part of Comcast's $117.5M Data Breach Settlement

Tyler Graham CNET

These 5 Android permissions are basically a backdoor — never grant them to apps you don't trust

Rob LeFebvre MakeUseOf

Avoid price discrimination with this 3-year VPN subscription for $68

Boing Boing's Shop Boing Boing

WordPress 7.0 Faces Security Concerns Over AI API Keys via @sejournal, @martinibuster

Roger Montti Search Engine Journal

Lawmakers Demand Answers as CISA Tries to Contain Data Leak

BrianKrebs Krebs on Security

Megalodon GitHub Attack Targets 5,561 Repos with Malicious CI/CD Workflows

info@thehackernews.com (The Hacker News) Internet

'No-logs architecture and encryption are non-negotiable' — ExpressVPN joins the backlash against Canada's controversial Bill C-22

Rene Millman TechRadar

Cisco used AI to write security incident reports, with mixed results

Simon Sharwood Theregister.com

One Telecom Provider Hosted Most of the Middle East ’s Active C2 Infrastructure

Pierluigi Paganini Securityaffairs.com

Your smart TV is tracking everything you watch — here's why and how to stop it

Chris Hachey MakeUseOf

Amazon, Facebook, FBI have access to a private intelligence-sharing network

Glen Stellmacher Prismreports.org

Microsoft Warns of Two Actively Exploited Defender Vulnerabilities

info@thehackernews.com (The Hacker News) Internet

Lose your laptop, not your data: 7 Windows settings to enable now

Chris Hoffman PCWorld

Here are the most costly travel scams to watch out for this summer

Michelle Couch-Friedman The Points Guy

The next election could be less secure

Scott Shackelford Salon

GitHub confirms breach — thousands of internal repositories hit after employee installs malicious VS Code extension

Sead Fadilpašić TechRadar

Patch window is officially dead as AI finds bugs faster than humans can squash them

Shane Fry TechRadar

Virtru centers file collaboration around data-level protection

Industry News Help Net Security

Grafana Labs Says Code Breach Stemmed from TanStack Attack

Phil Muncaster Infosecurity Magazine

Discord adds end-to-end encryption to voice and video calls by default

Pierluigi Paganini Securityaffairs.com

QIZ Security teams up with Google Cloud to help enterprises brace for the quantum cryptography threat

Darius Popa The Next Web

Discord now uses end-to-end encryption for all voice and video calls by default

Ben Lovejoy 9to5Mac

On AI Security

Bruce Schneier Schneier.com

I switched away from Cloudflare and Quad9 after finding this alternative

Pankil Shah MakeUseOf

Discord Voice and Video Calls Now End-to-End Encrypted by Default

Tim Hardwick MacRumors

What’s keeping IT leaders up at night in the AI era?

Michael Curry TechRadar

Webworm Deploys EchoCreep and GraphWorm Backdoors Using Discord and MS Graph API

info@thehackernews.com (The Hacker News) Internet

GitHub Investigating TeamPCP Claimed Breach of ~4,000 Internal Repositories

info@thehackernews.com (The Hacker News) Internet

Discord's voice and video calls just got much more secure, but it's still leaving text messages exposed

Simon Batt XDA Developers

ZTE releases Sustainability Report 2025: driving a new chapter in sustainable development through AI

ZTE null Theregister.com

Verizon DBIR: Vulnerability Exploits Overtake Credentials as Top Access Vector

Phil Muncaster Infosecurity Magazine

7 hard truths security pros should know: 2026 DevOps Threats Report

Help Net Security Help Net Security

How an image could compromise your Mac: understanding an ExifTool vulnerability (CVE-2026-3102)

Lucas Tay Securelist.com

Trapdoor Android Ad Fraud Scheme Hit 659 Million Daily Bid Requests Using 455 Apps

info@thehackernews.com (The Hacker News) Internet

Mac users beware — this devious new infostealer malware disguises itself as official Apple tools to lure in victims

Sead Fadilpašić TechRadar

Mexican government breached by solo user with Claude, 150 GB exfiltrated

Konstantin Tkachuk Konstantintkachuk.com

Hackers Bypass Security Tools to Target Users Directly

Phil Muncaster Infosecurity Magazine

Google could fix the absolute worst thing about passkeys on Android

techkritiko@gmail.com (Jay Bonggolto) , Jay Bonggolto Android Central

Canonical launches Ubuntu Core 26

Canonical (Canonical) Canonical.com

The Windows security feature most people ignore is the one I check first on every PC

Manuviraj Godara MakeUseOf

Poland shifts away from Signal following cyberattacks on officials’ accounts

Pierluigi Paganini Securityaffairs.com

Mini Shai-Hulud Pushes Malicious AntV npm Packages via Compromised Maintainer Account

info@thehackernews.com (The Hacker News) Internet

The Lines We Thought Machines Wouldn’t Cross

Mac Slavo Shtfplan.com

This Week in Security: Android Exposes ADB, ShinyHunters Get Paid, Robot Dogs, and More

Mike Kershaw Hackaday

Grafana says hackers hit its GitHub environment, demand ransom to prevent codebase release — but it's refusing to pay

Sead Fadilpašić TechRadar

TanStack weighs invitation-only pull requests after supply chain attack

Tim Anderson Theregister.com

After fixing a family friend’s phone, I realized Google Play Protect is not doing enough

Megan Ellis Android Authority

Microsoft backtracks on Edge storing your passwords in plaintext RAM

Laura Pippig PCWorld

How to better protect your growing business in an AI-powered world

Alym Rayani Microsoft.com

A sentimental tour of late 1990s and early 2000s hacking tools

Andrea Fortuna Andreafortuna.org

Apple Project Files Allegedly Stolen in Foxconn Ransomware Attack

Tim Hardwick MacRumors

New BitLocker vulnerability exposes Windows 11 users to system breach

Quentyn Kennemer MakeUseOf

VLAN isolation sounds great until you forget the firewall rules that actually make it work

Rich Edmonds XDA Developers

European governments: 3.000 tracking sites, 1.000 phpMyAdmins, and 99% poorly

Internet Cleanup Foundation Internetcleanup.foundation

Apple supplier Foxconn confirms ransomware attack affected North American factories

Marcus Mendes 9to5Mac

GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal Data

info@thehackernews.com (The Hacker News) Internet

NHS Expands Palantir Access To Identifiable Patient Data

Paulo Montenegro Ubergizmo

Broken Promises: RIP Instagram’s End-to-End Encrypted DMs

Thorin Klosowski EFF

Agentic SOC startup Exaforce closes $125M round at reported $725M valuation

Duncan Riley SiliconANGLE News

Is your internet provider quietly slowing down your Netflix streams? Here’s how to check (and stop it)

Rene Millman TechRadar

Downloaded Cemu for Linux recently? You may have malware

Joey Sneddon Omgubuntu.co.uk

Your Android security and privacy got huge upgrades—The Android Show reveals all

nickodiaz@sbcglobal.net (Nickolas Diaz) , Nickolas Diaz Android Central

AirBit crypto Ponzi victims can now claim slice of $400M asset haul

Connor Jones Theregister.com

The Ethereum Foundation unveils new 'Clear Signing' standard to stop users from approving malicious crypto transactions

Margaux Nijkerk CoinDesk

New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution

info@thehackernews.com (The Hacker News) Internet

12 new security features coming to Android phones in 2026

Adamya Sharma Android Authority

Patch Tuesday, May 2026 Edition

BrianKrebs Krebs on Security

Meta Can Now Read Your Instagram DMs – Here's How To Protect Yourself

staff@bgr.com (Alan Bradley) BGR

"What an insane screw up": Xbox itself leaks 'Forza Horizon 6' PC files in full a week before launch — and pirates already cracked it

jez@windowscentral.com (Jez Corden) , Jez Corden Windows Central

Obsidian plugin was abused to deploy a remote access trojan

CyberNetSec.io Netsecops.io

The rise of shadow AI

Amanda Hoover Business Insider

Taiwan's train cyber-trauma reveals a global system that’s coming off the tracks

Rupert Goodwins Theregister.com

Debian's next release just made it near-impossible for tampered binaries to sneak onto your PC

Simon Batt XDA Developers

Instagram removed end-to-end encryption for DMs. What should users do?

Pierluigi Paganini Securityaffairs.com

Windows 11 Pro has a disposable PC hidden inside it, and I wish I’d used it sooner

Pankil Shah MakeUseOf

Ollama Out-of-Bounds Read Vulnerability Allows Remote Process Memory Leak

info@thehackernews.com (The Hacker News) Internet

'People use smartphones more but invest less in their security': New report claims McAfee and Norton remain the most loved antivirus brands as users ditch lesser-known security products for free tools like Microsoft Defender or Apple Xprotect

Efosa Udinmwen TechRadar

Meta Discontinues End-to-End Encryption For Instagram Direct Messages

Paulo Montenegro Ubergizmo

5 Steps the FBI Wants You to Take to Secure Your Router Right Now

Security Affairs newsletter Round 576 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

possible malware

ticklemepink BleepingComputer

What Is the Instructure Canvas Breach? Impact, Risks, and What Institutions Should Do

Johnny Hand Trendmicro.com

This Hidden Router Setting Might Help Your Older Devices, But There's A Catch

staff@bgr.com (Alan Bradley) BGR

The EU becomes the latest authority to signal that VPNs are next, after launching its age verification app — here's how VPNs went from a necessity security tool to circumvention software that needs to be restricted

chiara.castro@futurenet.com (Chiara Castro) , Chiara Castro TechRadar

Quasar Linux RAT (QLNX): A Fileless Linux Implant Built for Stealth and Persistence

Pierluigi Paganini Securityaffairs.com

FCC reverses course, allows software updates for foreign-made drones and routers until 2029 — agency says blocking security patches could create cybersecurity risks

Etiido Uko Tom's Hardware UK

Fake OpenAI repository on Hugging Face pushes infostealer malware

Bill Toulas BleepingComputer

Fake macOS Troubleshooting Sites Used to Steal iCloud Data in ClickFix Scam

Deeba Ahmed HackRead

Universities Suspend Final Exams After Canvas Hack

Ryan Quinn Inside Higher Ed

EU calls VPNs "a loophole that needs closing" in age verification push

Alex Lekander Cyberinsider.com

Non-determinism is an issue with patching CVEs

Flox Team Flox.dev

OpenAI introduces GPT‑5.5‑Cyber for high-impact cybersecurity research

Maria Deutscher SiliconANGLE News

With Denuvo Completely Defeated, 2K Turns To Annoying Online Check In Requirement

Timothy Geigner Techdirt

This Week in Security: Another Linux Exploit, Ubuntu Knocked Offline, Finals Interrupted, and Backdoored Tools

Mike Kershaw Hackaday

Meta can see your Instagram messages now, and it's time to stop using it

sanujb6@gmail.com (Sanuj Bhatia) , Sanuj Bhatia Android Central

The Canvas Hack Is a New Kind of Ransomware Debacle

BeauHD Slashdot.org

TCLBANKER Banking Trojan Targets Financial Platforms via WhatsApp and Outlook Worms

info@thehackernews.com (The Hacker News) Internet

How to Make a Strong Password You Can Actually Remember

An Jay Smashingapps.com

Nation-state actors exploit Palo Alto PAN-OS zero-day for weeks

Pierluigi Paganini Securityaffairs.com

PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm-Like Across Cloud Systems

info@thehackernews.com (The Hacker News) Internet

IMF Warns New AI Models Risk 'Systemic' Shock To Finance

BeauHD Slashdot.org

Canvas Breach Disrupts Schools & Colleges Nationwide

BrianKrebs Krebs on Security

Chrome 148 patches 100+ vulnerabilities, including 3 critical flaws

Frank Ziemann PCWorld

Apple pushes back against Canadian bill that could force companies to weaken encryption

Marcus Mendes 9to5Mac

A look ahead: Making it easier and faster to publish safer apps

Android Developers Googleblog.com

'What started as someone potentially trying to remove the background from a selfie ended with a custom .NET stealer rifling through their browser passwords': Experts warn that free image editor tool could actually be dangerous malware

Sead Fadilpašić TechRadar

Milestone 1.0.0 Release of APK Downloader `apkeep` Powers Research on Android Apps

Bill Budington EFF

What Is Encryption? How It Protects Your Data

An Jay Smashingapps.com

ADT says customer data stolen in cyber intrusion

Jonathan Greig Therecord.media

Mirai-Based xlabs_v1 Botnet Exploits ADB to Hijack IoT Devices for DDoS Attacks

info@thehackernews.com (The Hacker News) Internet

Google Cloud fraud defense, the next evolution of reCAPTCHA

Jian Zhen Google News

Microsoft Edge will load all your passwords into memory in plaintext, but Microsoft says it's not a security concern

zac.bowden@futurenet.com (Zac Bowden) , Zac Bowden Windows Central

After Friday, Meta can read your Instagram DMs again

Ellsworth Toohey Boing Boing

‘PAY OR LEAK’: Hackers Target Big Higher Ed Vendor

kathryn.palmer@insidehighered.com Inside Higher Ed

India orders infosec red alert in case Mythos sparks crime spree

Simon Sharwood Theregister.com

Instructure hacker claims data theft from 8,800 schools, universities

Lawrence Abrams BleepingComputer

Eliminate pop-ups, autoplay ads, and tracking on the web for just $30

Boing Boing's Shop Boing Boing

DarkSword Malware

Bruce Schneier Schneier.com

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

info@thehackernews.com (The Hacker News) Internet

iPhone’s next big update will finally secure Android RCS chats

Rajesh Pandey Android Police

Microsoft Details Phishing Campaign Targeting 35,000 Users Across 26 Countries

info@thehackernews.com (The Hacker News) Internet

iPhone-Android RCS messaging finally gets the security upgrade we’ve been waiting for

Aamir Siddiqui Android Authority

Ripple to share North Korean threat intelligence with crypto firms

Shaurya Malwa CoinDesk

Singapore boffins get diverse SIEMs singing in harmony with agentic rule translation

Simon Sharwood Theregister.com

Protect every device you own with one VPN for $40

Boing Boing's Shop Boing Boing

Alberta voter list leak is a potential public safety disaster

Charles Rusnell Global News

Phishing Campaign Hits 80+ Orgs Using SimpleHelp and ScreenConnect RMM Tools

info@thehackernews.com (The Hacker News) Internet

AI agents create new risks requiring continuous monitoring and oversight

Nik Kairinos TechRadar

Your work apps are quietly handing 19 data points to someone

Mirko Zorz Help Net Security

NymVPN's new 'Pay as You Go' option ditches accounts and subscriptions for true anonymity

monicajwrites@gmail.com (Monica J. White) , Monica J. White TechRadar

Salt Typhoon breach IBM subsidiary in Italy: a warning for Europe’s digital defenses

Pierluigi Paganini Securityaffairs.com

Why Apple cannot unlock your deceased relative’s iPhone

Ed Hardy Cult of Mac

Something Nefarious Is Happening in Your Living Room Every Time You Watch TV

Nitish Pahwa Slate Magazine

3 easy-to-miss cybersecurity risks for small businesses

Malwarebytes Labs Malwarebytes.com

U.S. CISA adds a flaw in WebPros cPanel to its Known Exploited Vulnerabilities catalog

Pierluigi Paganini Securityaffairs.com

Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for months

Help Net Security Help Net Security

Critrical cPanel flaw mass-exploited in "Sorry" ransomware attacks

Lawrence Abrams BleepingComputer

US CISA adds ‘insane’ Linux Copy Fail flaw to watch list

Cointelegraph by Ciaran Lyons Cointelegraph

Your Windows PC's security foundation could expire in 8 weeks — Here's how to check if you're eligible for a new Secure Boot certificate

c.cale.hunt@gmail.com (Cale Hunt) , Cale Hunt Windows Central

I'm a VPN expert, and I've been using this $2 per month VPN deal for over two years to protect my phone, computer, and TV, as well as protect my devices from viruses and data breaches — here's how you can claim it yourself

Rob Dunne TechRadar

New Deep#Door RAT uses stealth and persistence to target Windows

Pierluigi Paganini Securityaffairs.com

'Beyond the financial risk, there are real public safety implications': Hackers crawled Canadian streets with SMS blasters, attacking every target in sight — causing 13 million network disruptions and hacking thousands of devices

Efosa Udinmwen TechRadar

Security posture improvement in the AI era

Celeste Bishop Amazon.com

Does Your AI Agent Need a VPN? The Company Behind Norton and Avast Thinks So

Ajay Kumar CNET

揺らぐバイオバンクUK？

nakamurayusuke Agora-web.jp

CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

Microsoft Defender Security Research Team Microsoft.com

Fear And Opportunity: Immigration Scams Surged As Trump’s Sweeps Lured Desperate People To Eager Defrauders

Naisha Roy, Francesca D’Annunzio, and J. David McSwane Techdirt

This Week in Security: State Malware, State Hardware Bans, and Stuxnet before Stuxnet was Cool

Mike Kershaw Hackaday

Report Links Piracy to Drugs, Weapons, and the Mafia; Calls for U.S. Site-Blocking

Ernesto Van der Sar Torrentfreak.com

Actively exploited cPanel bug exposes millions of websites to takeover

Pieter Arntz Malwarebytes.com

How the US Army is readying for a cyberspace fight against enemy AI hackers

Chris Panella Business Insider

China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists

info@thehackernews.com (The Hacker News) Internet

Criminal IP and Securonix ThreatQ Collaborate to Enhance Threat Intelligence Operations

cybernewswire Next Big Future

Your Biggest Vulnerability is your Shitty Compensation

Stegosaur Spacedino.net

'Zombie Tech continues to haunt UK networks': Decade-old vulnerabilities fuel 67 million attacks, exposing outdated, insecure systems across organisations nationwide

Efosa Udinmwen TechRadar

The never-ending supply chain attacks worm into SAP npm packages, other dev tools

Jessica Lyons Theregister.com

Cybersecurity’s A.I. Problem Isn’t Technology. It’s Human.

Judith Borts, Judith Borts Observer

Exposed Data Illustrates the Nightmare Scenario for a Stalkerware Victim

Matt Burgess, Lily Hay Newman Wired

French prosecutors link 15-year-old to mega-breach at state’s secure document agency

Connor Jones Theregister.com

PyTorch Lightning Compromised in PyPI Supply Chain Attack to Steal Credentials

info@thehackernews.com (The Hacker News) Internet

Anti-DDoS Firm Heaped Attacks on Brazilian ISPs

BrianKrebs Krebs on Security

World Cup 2026: how mobile networks can avoid cybersecurity chaos at kick-off

H. Khuong Nguyen Quan TechRadar

Ukrainian Police Arrest Three Hackers Who Compromised 610,000 Roblox Accounts and Sold Them for $225,000

Arthur Kay Ghacks Technology News

Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions

Graham Cluley Graham Cluley Security News

'Chaining vulnerabilities is the hallmark of a sophisticated attack': 750,000 websites must be patched as Microsoft's popular open source Dotnetnuke CMS hit by an XSS flaw that allows attackers to hijack admin sessions and take over entire web servers

Efosa Udinmwen TechRadar

Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India

Anton Kargin, Vladimir Gursky, Victoria Vlasova, Anna Lazaricheva Securelist.com

Built on patterns: How Susan Chang’s econometrics roots drive machine learning for security and her minimalist workspace

Elastic Culture Elastic.co

The Race Is on to Keep AI Agents From Running Wild With Your Credit Cards

Lily Hay Newman Wired

Investment scams just cost Americans $2.1 billion — here are 4 tips to avoid them

Sara Heritage MakeUseOf

Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak

Connor Jones Theregister.com

After Mythos: New Playbooks For a Zero-Window Era

info@thehackernews.com (The Hacker News) Internet

What Anthropic’s Mythos Means for the Future of Cybersecurity

Bruce Schneier Schneier.com

mssPortable 1.449.334 (Microsoft Safety Scanner antivirus launcher) Released

John T. Haller Portableapps.com

Italy extradites alleged Chinese cyber-espionage suspect to US

John Power Al Jazeera English

Ongoing supply-chain attack 'explicitly targeting' security, dev tools

Jessica Lyons Theregister.com

Medtronic Hack Confirmed After ShinyHunters Threatens Data Leak

Eduard Kovacs Securityweek.com

Elon Musk’s XChat App Is More Like Facebook’s Messenger Than Signal

Reece Rogers Wired

Utility giant Itron confirms cyberattack, says internal systems were accessed

Sead Fadilpašić TechRadar

Windows 11 debloat tools promise speed, but here's what actually happens

Joe Rice-Jones XDA Developers

4TB of voice samples just stolen from 40k AI contractors at Mercor

ORAVYS, ORAVYS Oravys.com

Burglar alarm biz burgled: ADT confirms cyber intrusion after ShinyHunters extortion attempt

Carly Page Theregister.com

Fast16: The Cyberweapon That Predates Stuxnet by Five Years

Bulls Eye Hackingpassion.com

Fake CAPTCHA IRSF Scam and 120 Keitaro Campaigns Drive Global SMS, Crypto Fraud

info@thehackernews.com (The Hacker News) Internet

U.S. utility giant Itron discloses a security breach

Pierluigi Paganini Securityaffairs.com

Your ISP has been watching your browsing this whole time — here's the Windows 11 fix

Oluwademilade Afolabi MakeUseOf

Chernobyl virus turned 27 today, and it could brick your PC in ways modern malware can't by overwriting BIOS firmware

Luke James Tom's Hardware UK

As phishing attacks hit Germany – how secure is Signal messenging app?

The Local The Local Germany

Security Affairs newsletter Round 574 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

A popular VPN just dropped a 5-year subscription for $40 (it was $359.40)

Stack Commerce Popular Science

Crime crew impersonates help desk, abuses Microsoft Teams to steal your data

Jessica Lyons Theregister.com

North Korean IT workers are stealing remote jobs and raking in billions—and Americans are helping them do it

Amanda Gerut Yahoo Entertainment

Apple @ Work: Is Safari the biggest shadow IT blind spot in your enterprise?

Bradley C 9to5Mac

My Website Is Hosting a Phishing Page – Now What?

Sucuri Sucuri.net

Act Now to Stop California’s Paternalistic and Privacy-Destroying Social Media Ban

Molly Buckley EFF

CISA reports persistent FIRESTARTER backdoor on Cisco ASA device in federal network

Pierluigi Paganini Securityaffairs.com

CISA Adds 4 Exploited Flaws to KEV, Sets May 2026 Federal Deadline

info@thehackernews.com (The Hacker News) Internet

This New HDMI Gadget Can Block Malware From Reaching Your Computer

staff@bgr.com (Briley Kenney) BGR

This Week in Security: Annoyed Researchers, Dangling DNS, and Hacks that Could Have Been Worse

Mike Kershaw Hackaday

26 FakeWallet Apps Found on Apple App Store Targeting Crypto Seed Phrases

info@thehackernews.com (The Hacker News) Internet

Google wants to protect me from myself, but I'm not sure I want it to

Irene Okpanachi Android Police

If malware via monitor cables is a matter of national security, this might be the gadget for you

Connor Jones Theregister.com

UNC6692 Impersonates IT Helpdesk via Microsoft Teams to Deploy SNOW Malware

info@thehackernews.com (The Hacker News) Internet

Former national cyber director: Anthropic’s ‘Mythos’ AI can hack nearly anything and we aren’t ready

Tristan Bove, Kemba Walden Yahoo Entertainment

Vercel identifies more accounts 'with evidence of prior compromise' exposed during security incident

Sead Fadilpašić TechRadar

Mosyle identifies two new macOS threats invisible to antivirus engines

Arin Waichulis 9to5Mac

Self-Propagating Supply Chain Worm Hijacks npm Packages to Steal Developer Tokens

info@thehackernews.com (The Hacker News) Internet

Microsoft says Windows 11’s built-in 'Defender' antivirus is "usually sufficient" for most PC users: "I haven't used a 3rd party antivirus since XP"

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Default BitLocker configuration isn’t enough: Defending endpoints against physical attacks

Ian Pratt TechRadar

ED searches on sons of Karnataka Congress MLA casts spotlight on 2017 Unocoin crypto exchange hacking probe

Express News Service The Indian Express

macOS ClickFix attacks deliver AppleScript stealers to snarf credentials, wallets

Jessica Lyons Theregister.com

Stop Paying for a VPN: Firefox Just Built One Right Into Your Browser

Omar Gallaga CNET

5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time

info@thehackernews.com (The Hacker News) Internet

Even trusted apps can infect your PC with malware now

Alaina Yee PCWorld

I set up Bitwarden on my own server for free and my passwords are now completely under my control

Afam Onyimadu MakeUseOf

‘Scattered Spider’ Member ‘Tylerb’ Pleads Guilty

BrianKrebs Krebs on Security

'88% Confident 90% Misled': Government & critical infrastructure leaders fundamentally misunderstand the security of the apps they use

Sead Fadilpašić TechRadar

SCAMMERS IN STRAIT

Reuters Yahoo Entertainment

Unionised Build a Rocket Boy staff take legal action against MindsEye studio, accusing management of breaking the law with "invasive" surveillance software

Mark Warren Rock Paper Shotgun

Claude Desktop changes app access settings for browsers you don't even have installed yet

Thomas Claburn Theregister.com

Employee Yelled At An IT Specialist And Threatened His Job, So He Recorded Her Abusive Calls And Got Her In Trouble

Sarrah Murtaza Twistedsifter.com

Cybersecurity jobs available right now: April 21, 2026

Anamarija Pogorelec Help Net Security

France’s ANTS ID System website hit by cyberattack, possible data breach

Pierluigi Paganini Securityaffairs.com

⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & More

info@thehackernews.com (The Hacker News) Internet

'We've identified a security incident': Vercel breach confirmed after hackers claim stolen data for sale online

Sead Fadilpašić TechRadar

Anthropic installs spyware when you install Claude Desktop

Alexander Hanff Thatprivacyguy.com

SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelines

Mirko Zorz Help Net Security

Lock Down Your Life: The Ultimate Guide to Securing Your Home Wi-Fi

David Anders CNET

Inside the rise of wrench attacks against crypto holders and how France has become the focus

Olivier Acuna CoinDesk

Airline worker arrested after sharing photos of bomb damage in WhatsApp group

Issy Clarke LBC

Vercel just confirmed an internal breach, and your non-sensitive env vars may be exposed

Simon Batt XDA Developers

Security Affairs newsletter Round 573 by Pierluigi Paganini – INTERNATIONAL EDITION

Pierluigi Paganini Securityaffairs.com

Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limits

Help Net Security Help Net Security

Chrome Remote Desktop is an okay TeamViewer alternative, this free, open-source tool is better than both

Parth Shah XDA Developers

Shutting Down SlackBITS After Impersonation-Based Malware Attack

Adam Engst TidBITS

School restricts kids' photos on social media, prompting calls for others to follow

Lottie Twyford ABC News (AU)

Kelp restaking platform exploited, $293M drained in attack

Cointelegraph by Vince Quill Cointelegraph

Security Bite: ClickFix malware authors already bypassing Apple’s new Terminal paste warning

Arin Waichulis 9to5Mac

$13.74M Hack Shuts Down Sanctioned Grinex Exchange After Intelligence Claims

info@thehackernews.com (The Hacker News) Internet

Best Free Password Manager in 2026 – That Are Actually Secure

An Jay Smashingapps.com

'Update immediately': 60,000 WordPress websites at risk after experts discover flaw that allows hackers to create hidden admin accounts

Efosa Udinmwen TechRadar

Cross‑tenant helpdesk impersonation to data exfiltration: A human-operated intrusion playbook

Microsoft Defender Security Research Team Microsoft.com

Techie buys fake Ledger Nano S+ hardware crypto wallet and almost falls for phishing — a convincing clone would have caught newbies unaware

editors@tomshardware.com (Bruno Ferreira) , Bruno Ferreira Tom's Hardware UK

This Week in Security: Docker Auth, Windows Tools, and a Very Full Patch Tuesday

Mike Kershaw Hackaday

NIST gives up enriching most CVEs

Catalin Cimpanu Risky.biz

We Reproduced Anthropic's Mythos Findings with Public Models

Dawid Moczadło, Klaudia Kloc, Marek Lewandowski, Amadeusz Lisiecki, Jakub Sienkiewicz, Mikołaj Palkiewicz Vidocsecurity.com

Inside ZionSiphon: politically driven malware aims at Israeli water systems

Pierluigi Paganini Securityaffairs.com

Anthropic won't own MCP 'design flaw' putting 200K servers at risk, researcher says

Jessica Lyons Theregister.com

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation

info@thehackernews.com (The Hacker News) Internet

Talk Python to Me: #545: OWASP Top 10 (2025 List) for Python Devs

Michael Kennedy Talkpython.fm

Rockstar On Latest Potential Hack & Information Leak: Meh, We Don’t Care

Timothy Geigner Techdirt

New infosec products of the week: April 17, 2026

Anamarija Pogorelec Help Net Security

The only way to fight deepfakes is by making deepfakes

Gaby Del Valle The Verge

New Hacking Threat Could Steal Your Accounts And Passwords - Even Through 2FA

staff@bgr.com (Briley Kenney) BGR

What to know about 'ship spoofing' by Iran-linked vessel to breach the US blockade

Bill Hutchinson Abcnews.com

ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories

info@thehackernews.com (The Hacker News) Internet

How Push Notifications Can Betray Your Privacy (and What to Do About It)

Thorin Klosowski EFF

'Towards a full private digital workspace': Tuta debuts quantum-resistant cloud storage ahead of Google Drive, OneDrive

Efosa Udinmwen TechRadar

UAC-0247 Targets Ukrainian Clinics and Government in Data-Theft Malware Campaign

info@thehackernews.com (The Hacker News) Internet

Does Gas Town 'steal' usage from users' LLM credits to improve itself?

gastownhall Github.com

'We are currently being extorted' — crypto giant Kraken says it is facing extortion attack, here's what we know

Sead Fadilpašić TechRadar

Automotive data biz Autovista blames ransomware for service disruption

Connor Jones Theregister.com

Microsoft's latest Windows update now confirms if your PC is Secure Boot-protected - how it works

Lance Whitney ZDNet

Over 100 Malicious Chrome Extensions Steal Google Tokens, Hijack Telegram Sessions, and Inject Ads

Arthur Kay Ghacks Technology News

A Tale of Cheap Hard Drives and Expensive Lessons

Tom Nardi Hackaday

Google Is About to Punish Websites for That Annoying Browser Back Button Trick

Tyler Graham CNET

Microsoft ends desktop detour for sensitivity labels in Office web apps

Sinisa Markovic Help Net Security

Stuck on a sketchy site? Google is finally putting a stop to it

techkritiko@gmail.com (Jay Bonggolto) , Jay Bonggolto Android Central

Audit Finds Google, Microsoft, and Meta Still Tracking Users After Opt-Out

BeauHD Slashdot.org

Dependency cooldowns turn you into a free-rider

Cal Paterson Calpaterson.com

G. Love Loses Reported $424,000 in Crypto Account Hack

Travis Bland Consequence.net

DNA-Level Encryption Developed by Researchers to Protect the Secrets of Bioengineered Cells

EditorDavid Slashdot.org

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

Help Net Security Help Net Security

Pig-butchering: Southeast Asia's scam hubs

theweekonlineeditorsuk@futurenet.com (The Week UK) , The Week UK The Week Magazine

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

info@thehackernews.com (The Hacker News) Internet

CPU-Z and HWMonitor official download links hijacked, malware included

Petteri Pyyny Afterdawn.com

What’s in the new DNA encryption for cells? #science

AllToc Alltoc.com

Uncovering Webloc: An Analysis of Penlink’s Ad-based Geolocation Surveillance Tech - The Citizen Lab

jk Citizenlab.ca

How AI is getting better at finding security holes

Huo Jingnan NPR

How Should We Prepare for the Looming Quantum Encryption Apocalypse?

Gayoung Lee Gizmodo.com

RapidIPTV Kingpin ‘Dash the Iranian’ Gets Two Years Prison Under Spanish Plea Deal

Ernesto Van der Sar Torrentfreak.com

Rockstar Games Reportedly Hacked, Team Behind It Threaten A Massive Data Leak If Not Paid Ransom

Zack Zwiezen Kotaku

Authenticate SSH with Your TPM

Al Williams Hackaday

Microsoft terminated accounts tied to VeraCrypt, WireGuard, and Windscribe — developers push back

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

Two different attackers poisoned popular open source tools - and showed us the future of supply chain compromise

Jessica Lyons Theregister.com

Adobe Reader Zero-Day Exploit Uses Fake PDF Files To Steal User Data

Paulo Montenegro Ubergizmo

Installing Every* Firefox Extension

Jack.cab Jack.cab

Encrypted Emails Are Now Available for Some Gmail Phone App Enterprise Customers

Alex Valdes CNET

ShinyHunters Claims Rockstar Games Snowflake Breach via Anodot

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

info@thehackernews.com (The Hacker News) Internet

The FCC says foreign routers are a security risk, but still allows firmware updates to the ones you already own

Adam Conway XDA Developers

"Not every 'WTF micro$oft' moment is a slam dunk": Microsoft terminated developer accounts for VeraCrypt, WireGuard, and Windscribe — What really happened?

kevinokemwa@outlook.com (Kevin Okemwa) , Kevin Okemwa Windows Central

‘It’s a potential national security threat’: Proton study finds over 3,500 US legislators’ official emails leaked and exposed on the dark web

benedict.collins@futurenet.com (Benedict Collins) , Benedict Collins TechRadar

What’s new in security for Ubuntu 26.04 LTS?

ijlal-loutfi (ijlal-loutfi) Ubuntu.com

Britain seeks views before it drops the hammer on signal jammers

Connor Jones Theregister.com

Eurail data breach impacted 308,777 people

Pierluigi Paganini Securityaffairs.com

OpenAI: Hey, We Also Have a New Tool That Is So Scarily Powerful We Can’t Release It

AJ Dellinger Gizmodo.com

Healthcare IT solutions provider ChipSoft hit by ransomware attack

Bill Toulas BleepingComputer

Backdoored Smart Slider 3 Pro Update Distributed via Compromised Nextend Servers

info@thehackernews.com (The Hacker News) Internet

Yikes, Encryption’s Y2K Moment is Coming Years Early

Erica Portnoy EFF

The Nazis’ Most Notoriously Complex Cryptographic Machine Is Now Available Online

Tom Hawking Gizmodo.com

'Several dozen' high-value corporations hit by new extortion crew in helpdesk phishing spree

Jessica Lyons Theregister.com

8 phishing red flags hidden in everyday emails

Jon Martindale PCWorld

Bitter-Linked Hack-for-Hire Campaign Targets Journalists Across MENA Region

info@thehackernews.com (The Hacker News) Internet

I switched from Gmail to Proton Mail, and not just because of privacy

Mitja Rutnik Android Authority

Mac users beware — experts say this attack 'stood out immediately' by making a major change to try spread malware

Sead Fadilpašić TechRadar

7 Ways to Boost the Privacy of Your Home and Gadgets

Tyler Lacoma CNET

Criminal wannabes even more dangerous than the pros, says ex-FBI cyber chief

Jessica Lyons Theregister.com

Banning New Foreign Routers Mistargets Products to Fix Real Problem

Bill Budington EFF

Crypto Scams and Senior Fraud Drive $21 Billion in 2025 Cyber Theft, FBI Reports

Jeff Carlson CNET

Microsoft Abruptly Terminates VeraCrypt Account, Halting Windows Updates

BeauHD Slashdot.org

Ex-Facebook Employee Investigated for Downloading 30,000 Private Photos

Pesala Bandara PetaPixel

APT28 Deploys PRISMEX Malware in Campaign Targeting Ukraine and NATO Allies

info@thehackernews.com (The Hacker News) Internet

FBI says cyber fraud cost Americans $21B last year – here’s what you need to know

Ben Lovejoy 9to5Mac

Digital Hopes, Real Power: How the Arab Spring Fueled a Global Surveillance Boom

Sarah Hamid EFF

I replaced my paid VPN app with a feature Windows already had — and it works perfectly

Tashreef Shareef MakeUseOf

Snowflake customers suffer data theft attacks after third-party issue, company confirms 'unusual activity'

Sead Fadilpašić TechRadar

ICE acknowledges it is using powerful spyware

Jude Joffe-Block NPR

Pro-Iran Hackers Target Critical U.S. Energy and Water Infrastructure

Matt Novak Gizmodo.com

Mercor hit with 5 contractor lawsuits in a week over data breach

Jack Newsham Business Insider

Iran-Linked Hackers Are Sabotaging US Energy and Water Infrastructure

Andy Greenberg Wired

EU Parliament Blocks Mass-Scanning of Our Chats—What's Next?

Christoph Schmon EFF

'Stolen session cookies render MFA irrelevant': How $900-per-month turnkey malware is putting enterprise-grade account hijacking in the hands of rookie hackers

Efosa Udinmwen TechRadar

What managing partners should ask AI vendors before signing any contract

Mirko Zorz Help Net Security

Russia's Fancy Bear still attacking routers to boost fake sites, NCSC warns

Connor Jones Theregister.com

Crypto Project Details Alleged 6-Month North Korean Intel Op Behind $285 Million Hack

Kyle Torpey Gizmodo.com

Russia Hacked Routers to Steal Microsoft Office Tokens

BrianKrebs Krebs on Security

Breaking the console: a brief history of video game security

Sergio Prado Sergioprado.blog

Over 1,000 Exposed ComfyUI Instances Targeted in Cryptomining Botnet Campaign

info@thehackernews.com (The Hacker News) Internet

'Your login credentials may already be slipping into the hands of a cybercriminal': Hackers target LinkedIn accounts with devious new phishing attacks — here's how to stay safe

Efosa Udinmwen TechRadar

How Mimecast brings enterprise-grade email protection to API deployment

Help Net Security Help Net Security

Phishing LNK files and GitHub C2 power new DPRK cyber attacks

Pierluigi Paganini Securityaffairs.com

Trump Administration Bans Chinese Routers. Phones and Cameras Could Follow

Tyler Graham CNET

Windows 10 is still better than Windows 11—here's how to keep it safe past 2026

Jorge A. Aguilar How-To Geek

Security Bite: Trojan malware dominates Mac, now half of all detections, says Jamf

Arin Waichulis 9to5Mac

Wisconsin Remains a Gooning Sanctuary State After Governor Rejects Age Verification Bill

AJ Dellinger Gizmodo.com

Iran-Linked Password-Spraying Campaign Targets 300+ Israeli Microsoft 365 Organizations

info@thehackernews.com (The Hacker News) Internet

Backups won’t save you from this version of ransomware

Josh Taylor TechRadar

Attackers exploited this critical FortiClient EMS bug as a 0-day

Jessica Lyons Theregister.com

Germany Doxes “UNKN,” Head of RU Ransomware Gangs REvil, GandCrab

BrianKrebs Krebs on Security

A simple explainer on what quantum computing actually is, and why it is terrifying for bitcoin

Shaurya Malwa CoinDesk

Product showcase: Proton Authenticator is an end-to-end encrypted, open source 2FA app

Anamarija Pogorelec Help Net Security

Malwarebytes just proved its no-logs VPN policy is the real deal

Rene Millman TechRadar

Crypto attorney says Drift incident may qualify as 'civil negligence'

Cointelegraph by Vince Quill Cointelegraph

Iran threatens “annihilation” of $30B AI data center, escalating tech infrastructure warfare

Willow Tohi Naturalnews.com

Researchers didn’t want to glamorize cybercrims. So they roasted them

Jessica Lyons Theregister.com

Russia Allegedly Swung at VPNs but Accidentally Hit Its Own Banking Sector Instead

Mike Pearl Gizmodo.com

Ditch Your Passwords And Start Using This More Secure Method

staff@bgr.com (Faith Leroux) BGR

My Expert Advice: Don’t Buy a Router Until We Know More About the FCC's Ban

I stopped using Event Viewer to check failed logins after discovering this PowerShell trick

Pankil Shah MakeUseOf

$285 Million Drift Hack Traced to Six-Month DPRK Social Engineering Operation

info@thehackernews.com (The Hacker News) Internet

Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited

Help Net Security Help Net Security

How did attackers steal $270M via Drift? #tech

AllToc Alltoc.com

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants

info@thehackernews.com (The Hacker News) Internet

Drift Protocol $280M exploit took 'months of deliberate preparation'

Cointelegraph by Ciaran Lyons Cointelegraph

ESP32-S3 gets post-quantum encryption with Aethyr Edge Node open-source firmware

Jean-Luc Aufranc (CNXSoft) CNX Software

Bitcoin's $1.3 trillion security race: Key initiatives aimed at quantum-proofing the world's largest blockchain

Omkar Godbole, AI Boost CoinDesk

Axios npm hack used fake Teams error fix to hijack maintainer account

Lawrence Abrams BleepingComputer

Strava runs are continuing to leak sensitive military information, with over 500 UK soldiers the latest to be exposed

David Nield TechRadar

The FCC’s Router Ban Is About to Become a 'Mess.' Here's What It Means for Your Home Network

Your router is probably end-of-life and you don't even know it

Yadullah Abidi MakeUseOf

Delve sets the record straight on anonymous attacks

Karun Kaushik Delve.co

Supply Chain Attacks Surge in March 2026

ThreatLabz (Zscaler) Zscaler.com

Claude Code Found a Linux Vulnerability Hidden for 23 Years

Michael Lynch Mtlynch.io

Show HN: Mtproto.zig – High-performance Telegram proxy with DPI evasion

sleep3r Github.com

I ran Nvidia's NemoClaw to see if OpenClaw is finally safe, but it still has the same problems

Adam Conway XDA Developers

2.3 Million Users Affected by New Android Malware Hid in 50 Google Play Apps

Tyler Lee Android Headlines

Avast Premium Isn’t Flashy — But It Might Be the Smartest Cheap Antivirus Right Now

C2s Gizmodo.com

This Week in Security: The Supply Chain Has Problems

Mike Kershaw Hackaday

Solana Drift Protocol drained of $285M via fake token and governance hijack

Artem Safonov Anonhaven.com

Why I Use Additional Antivirus Protection on Top of Microsoft Defender

Marshall Gunnell CNET

Senators Ask Tulsi Gabbard To Tell Americans That VPN Use Might Subject Them To Domestic Surveillance

Tim Cushing Techdirt

Post Mortem: axios NPM supply chain compromise

axios Github.com

‘Uncanny Valley’: Iran’s Threats on US Tech, Trump’s Plans for Midterms, and Polymarket’s Pop-up Flop

Brian Barrett, Zoë Schiffer, Leah Feiger, Makena Kelly, Kate Knibbs Wired

Trivy supply chain attack enabled European Commission cloud breach

Zeljka Zorz Help Net Security

This new 'laughing rat' malware will steal your data and hack your systems — and then laugh at you while doing it

Sead Fadilpašić TechRadar

CERT-EU: European Commission hack exposes data of 30 EU entities

Sergiu Gatlan BleepingComputer

Hit List: Iran Threatens US and Israeli Corporations

Kurt Nimmo Globalresearch.ca

The company's biggest security hole lived in the breakroom

Avram Piltch Theregister.com

WhatsApp Alerts 200 Users After Fake iOS App Installed Spyware; Italian Firm Faces Action

info@thehackernews.com (The Hacker News) Internet

'No Need to Panic': Binance Founder Says Crypto Can Survive Quantum Computing Threat by Upgrading

John Potter Yahoo Entertainment

This lifetime VPN and password manager bundle is on sale for $40

DealPost Team PCWorld

AI recruiting biz Mercor says it was 'one of thousands' hit in LiteLLM supply-chain attack

Jessica Lyons Theregister.com

Obfuscation is not security – AI can deobfuscate any minified JavaScript code

Nikita Savchenko Afterpack.dev

WhatsApp's former security chief is 'not done fighting' after his lawsuit got dismissed

Charles Rollet Business Insider

Iran Threatens to Strike US Tech Companies in the Middle East

Omar Gallaga CNET

Securing the open source supply chain across GitHub

Zachary Steindler Github.blog

This iOS 18 patch could protect your device from a vicious malware strain — here’s why you need it now

alexblake.techradar@gmail.com (Alex Blake) , Alex Blake TechRadar

Federal Cyber Experts Thought Microsoft’s Cloud Was “A Pile Of Shit.” They Approved It Anyway.

Renee Dudley Techdirt

3 Reasons Attackers Are Using Your Trusted Tools Against You (And Why You Don’t See It Coming)

info@thehackernews.com (The Hacker News) Internet

Code Breaker: Meet the Man Who Cracked the C8 Corvette's Encrypted Brain

Alex Kierstein RoadandTrack.com

The LastPass breach settlement is real. Here’s what you should know

Alaina Yee PCWorld

ExpressVPN vs. NordVPN: Which VPN service is better?

Marc Dahan Salon

North Korean hackers bug software used by thousands of US companies in potential crypto heist attempt

Sean Lyngaas, CNN CNN

Iran Threatens to Start Attacking Major US Tech Firms on April 1

Dell Cameron, Louise Matsakis Wired

DHS needs to get funded to 'ensure' a safe World Cup, official says

Luke Barr Abcnews.com

IT Expert Freaked Out Because His Computer Started Acting Weird, But Then He Found Out His Receptionist Was Behind The System Failure

Sarrah Murtaza Twistedsifter.com

Malware detectors trained on one dataset often stumble on another

Anamarija Pogorelec Help Net Security

The FCC Just Banned All New Foreign-Made Routers. Everything You Need to Know to Keep Your Network Safe

Don't open that WhatsApp message, Microsoft warns

Jessica Lyons Theregister.com

Is “Hackback” Official US Cybersecurity Strategy?

Bruce Schneier Schneier.com

Supply chain blast: Top npm package backdoored to drop dirty RAT on dev machines

Carly Page Theregister.com

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks

info@thehackernews.com (The Hacker News) Internet

Healthcare tech firm CareCloud admits data breach, says hackers accessed patient info — here's what we know

Sead Fadilpašić TechRadar

Game Pirates Beat Denuvo with Hypervisor Bypasses — Irdeto Promises Countermeasure

Ernesto Van der Sar Torrentfreak.com

How physicists proved that quantum weirdness is a feature, not a bug

Joseph Howlett Scientific American

Employee Data Breaches Surge to Seven-Year High

Phil Muncaster Infosecurity Magazine

Trump’s New White House App Is Mildly Concerning and Weird for a Lot of Reasons

Ece Yildirim Gizmodo.com

Incident March 30th, 2026 – Accidental CDN Caching

Jacob Cooper Railway.com

Axios Supply Chain Attack Pushes Cross-Platform RAT via Compromised npm Account

info@thehackernews.com (The Hacker News) Internet

Why I’m done calling humans the weakest link

Help Net Security Help Net Security

Welcome, Daily Show Viewers! Learn More About EFF and Privacy's Defender

Jason Kelley EFF

'DarkSword' Attack Is Now Targeting Vulnerable iPhones Via Phishing Emails

Michael Kan PCMag.com

FBI Chief Kash Patel's Emails Leaked by Iran-Linked Hackers in Recent Breach

Ty Pendlebury CNET

How Does Offline Bitcoin Signing Work Step by Step

Frozen Security Frozensecurity.com

Spy Tech: Conflicts Bring a New Number Station

Al Williams Hackaday

OpenAI patches ChatGPT flaw that smuggled data over DNS

Thomas Claburn Theregister.com

Android developer verification: Rolling out to all developers on Play Console and Android Developer Console

Android Developers Googleblog.com

I thought I needed a password manager app until I tried Android’s built-in one

Digvijay Kumar MakeUseOf

Apple’s Camera Indicator Lights

Bruce Schneier Schneier.com

New Company Hopes to Build Age-Verification Tech into Vape Cartridges

EditorDavid Slashdot.org

Philly courts will ban all smart eyeglasses starting next week

Nate File The Philadelphia Inquirer

European Commission admits attackers broke into public web systems, but says little else

Carly Page Theregister.com

If Google is serious about Android scams, there’s a bigger problem than sideloading

Megan Ellis Android Authority

The State of Secrets Sprawl 2026: 9 Takeaways for CISOs

info@thehackernews.com (The Hacker News) Internet

European Commission confirms platform data breach — admits 'data have been taken' from official websites

Sead Fadilpašić TechRadar

FBI Issues Dangerous Streaming Hack Warning For Hundreds Of Millions

Davey Winder, Senior Contributor Forbes

ChatGPT Won't Let You Type Until Cloudflare Reads Your React State

Buchodi Buchodi.com

FBI confirms hack of Director Patel's personal email inbox

Ionut Ilascu BleepingComputer

Iran and US have been fighting a silent war without bombs or bullets for over a decade

Trending Desk The Times of India

The latest Instagram and Facebook scams to watch out for

Dr. Tim Sandle Digital Journal

If You Buy a New Router, It Might ‘Turn Into a Pumpkin’ Next Year

Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packages

Help Net Security Help Net Security

Hacked hospitals, hidden spyware: Iran conflict shows how digital fight is ingrained in warfare

DAVID KLEPPER Associated Press Abcnews.com

Turning Tesla Model 3’s Computer Into a Desktop PC

Maya Posch Hackaday

Iran-Linked Hackers Breach FBI Director’s Personal Email, Hit Stryker With Wiper Attack

info@thehackernews.com (The Hacker News) Internet

ShinyHunters claims the hack of the European Commission

Pierluigi Paganini Securityaffairs.com

This tax season is a key time to delete your personal data from the internet

Sponsored Post 9to5Mac

Last call: Exclusive NordVPN 4-month bonus + Amazon gift card ends today

Rob Dunne TechRadar

TA446 Deploys Leaked DarkSword iOS Exploit Kit in Targeted Spear-Phishing Campaign

info@thehackernews.com (The Hacker News) Internet

Attackers are exploiting RCE vulnerability in BIG-IP APM systems (CVE-2025-53521)

Zeljka Zorz Help Net Security

Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account

Pierluigi Paganini Securityaffairs.com

Don't YOLO your file system

Unknown Stanford.edu

TeamPCP Supply Chain Campaign: Update 002 - Telnyx PyPI Compromise, Vect Ransomware Mass Affiliate Program, and First Named Victim Claim, (Fri, Mar 27th)

Unknown Sans.edu

'This is a final warning': Hackers say they'll leak "several terabytes" of ZenBusiness data

Sead Fadilpašić TechRadar

Open VSX Bug Let Malicious VS Code Extensions Bypass Pre-Publish Security Checks

info@thehackernews.com (The Hacker News) Internet

DarkSword leak puts millions of iPhone users at risk

Unknown Fox News

We Are At War

info@thehackernews.com (The Hacker News) Internet

Surfshark vs NordVPN: Which VPN service is better?

Jared Howe Salon

Iran war drives urgent need to counter underwater attack drones

Dan Robinson Theregister.com

Ajax data breach exposed season tickets, supporter bans open to tampering

Sinisa Markovic Help Net Security

Prevent agentic identity theft

Phoebe Sajor Stackoverflow.blog

U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog

Pierluigi Paganini Securityaffairs.com

Web Shells: Types, Mitigation & Removal

Cesar Anjos Sucuri.net

Ajax suffers major own goal as data breach hits personal info of 300,000 fans

Sead Fadilpašić TechRadar

Security Bite: What stands out in the iOS 26.4 security release notes

Arin Waichulis 9to5Mac

Mikael Barbero: Don't become the next Trivy: how to make your releases, tags, and automation resistant to compromise

mikael.barbero@eclipse-foundation.org (Mikaël Barbero) Barbero.tech

WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

info@thehackernews.com (The Hacker News) Internet

Millions possibly affected by data breach at dermatology giant QualDerm

Sead Fadilpašić TechRadar

The Most Secure, Modern Computer Might Be A Mac

Bryan Cockfield Hackaday

GlassWorm Malware Uses Solana Dead Drops to Deliver RAT and Steal Browser, Crypto Data

info@thehackernews.com (The Hacker News) Internet

Jen Easterly, cybersecurity's 'relentless optimist,' hopes feds come back to RSAC next year

Jessica Lyons Theregister.com

Crunchyroll Responds to Claims of Data Breach

Kourtnee Jackson CNET

Hackers Use Fake Resumes to Steal Enterprise Credentials and Deploy Crypto Miner

info@thehackernews.com (The Hacker News) Internet

QualDerm Partners December 2025 data breach impacts over 3 Million people

Pierluigi Paganini Securityaffairs.com

A US judge dismisses a lawsuit against Meta by Attaullah Baig, former head of cybersecurity at WhatsApp, who alleged Meta ignored critical security flaws (Carly Nairn/Courthouse News Service)

Unknown Techmeme.com

DocuSign email scam targets healthcare workers

Unknown Fox News

HackerOne slams supplier for delayed breach notice after staff data exposed

Carly Page Theregister.com

'Traces of unauthorized access': Mazda confirms data breach exposing employee and partner data — here's what we know

Sead Fadilpašić TechRadar

Your wireless router is now banned from sale in the US, but you can still use it

Ben Lovejoy 9to5Mac

Tuskira replaces centralized detection model with real-time, distributed approach

Industry News Help Net Security

Buying a router in the US is about to get complicated

Dave Schafer MakeUseOf

Flipper Zero, Everyone’s Favorite Legally Dubious Hacker Tool, Gets an AI Upgrade

AJ Dellinger Gizmodo.com

Why CISOs must link cyber to an organization's profit and loss

Thom Langford TechRadar

Lightning-fast exploits make it essential to patch fast, ask questions later

Brandon Vigliarolo Theregister.com

ATM jackpotting attacks surge across the US

Unknown Fox News

Attacker Exploits Crypto Stablecoin for a $25 Million Payday

Kyle Torpey Gizmodo.com

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More

info@thehackernews.com (The Hacker News) Internet

The visibility gap holding back the agentic SOC

Jamie Moles TechRadar