Category
Threat intelligence, privacy, breaches, and security best practices.
A critical vulnerability in LiteSpeed Web Server Enterprise allows low-privilege users to gain root access on shared-hosting servers, as warned by cPanel in a September 14 advisory.
Explore
Continue browsing across the newsroom.
Artificial intelligence, machine learning, and generative AI breakthroughs.
Emerging tech, industry shifts, and digital transformation news.
Wearables, smart home devices, and consumer electronics reviews.
Smartphone launches, mobile OS updates, and app ecosystem news.
Apps, platforms, developer tools, and open-source updates.
Web platforms, connectivity, cloud services, and digital culture.
Cybersecurity researchers have revealed a mass-scanning campaign targeting Vite deployments to extract sensitive cloud credentials and configurations from AWS and Microsoft Azure instances.
The article discusses the limitations of current cybersecurity testing methods, emphasizing the need to focus on attack chains rather than just individual techniques. It highlights that while organizations have improved their testing capabilities, a more holistic approach is necessary for effective
A report by Sysdig reveals that skilled human attackers can exploit vulnerabilities rapidly, with one instance showing a threat actor moving from a vulnerable Marimo notebook to an SSH bastion in just eight seconds, highlighting the dangers posed by AI in cybersecurity.
Cybersecurity researchers have revealed the BambooToken malware, which uses the MQTT protocol to control Windows and Linux systems. Active since February 2023, it targets organizations in Asia and South America.
Nintendo Switch owners are advised to update their firmware following the discovery of a security exploit. The issue does not impact the Nintendo Switch 2.
Digital wallets offer convenience and enhanced security features that protect users' cards better than physical wallets.
A new cybersecurity threat known as 'ClickFix' is targeting Mac and Windows users, particularly those who clicked on fake HBO Max ads on Reddit.
Researchers have revealed a new hardware attack named DDRop that compromises memory protection in Intel and AMD confidential computing systems by allowing attackers to manipulate memory writes.
An attacker exploited the MeshCentral management tool to gain root access within the network of 3BB, a major broadband provider in Thailand. The intrusion was discovered by Hunt.io through an open server containing the attacker's tools.
A suspected Chinese threat actor, Red Heron, has exploited a Gitea RCE vulnerability, compromising 13 organizations across six countries. The Acronis Threat Research Unit reported that Red Heron scanned 1,386 Gitea instances, focusing on 477 systems in Taiwan.
A vulnerability in Telegram Desktop allows hidden JavaScript to be embedded in exported HTML files, enabling data exfiltration when opened in a web browser, according to security researchers at ExPatch.
A malicious Twitch browser extension has leaked OAuth tokens from nearly 31,000 users to proxy servers run by a Russian bot service. The extension, called 'Twitch Enhanced Viewer | JeetBot,' poses a significant security risk.
Microsoft revealed two campaigns where attackers used passkey phishing and third-party email infrastructure to send over a million scam emails, targeting cloud accounts for financial fraud.
The article discusses the impact of AI on vulnerability discovery in cybersecurity, highlighting a significant increase in published CVEs. It emphasizes the need for defenders to prioritize actionable findings amidst the growing scale of vulnerabilities.
The week highlighted the misuse of AI in cybersecurity, with attackers leveraging it to enhance exploits and automate tasks. Despite advancements, old vulnerabilities and weak system defaults continue to pose significant risks.
Google has launched Gemini 3.5 Flash Cyber, a lightweight cybersecurity model designed to identify and fix vulnerabilities.
Google DeepMind emphasizes the importance of proactive cyber defense strategies for governments and enterprises to enhance their security posture against evolving threats.
The article discusses the impact of AI on cybersecurity, focusing on the development of adaptive agentic systems that can enhance security operations by identifying gaps in defenses.
The article discusses the need for security teams to focus on optimizing the assessment of vulnerabilities, emphasizing that not all critical vulnerabilities pose the same level of risk, especially when mitigated by strong defenses.
Anthropic has disrupted a campaign by a Russian state-sponsored hacker group, GTG-20006, which used Claude to develop AI-assisted malware workflows to evade detection.
PaperCut has released a new security maintenance update to replace previous emergency patches for two actively exploited vulnerabilities. The updates are available for versions 26.0.5, 25.0.13, and 24.1.10.
A China-linked hacking group exploited a vulnerability in Sogou Input Method to deploy the GRAYRABBIT backdoor on victims' computers, according to Gen Digital's research. The attack began with a crafted link, allowing attackers to gain full access to the logged-in user's capabilities.
Anthropic has raised concerns that its Claude models are being exploited by cybercriminals and state-sponsored hackers for various malicious activities, including cyber attacks and mass surveillance, between December 2025 and August 2026.
