Security

Onslaught of Linux kernel bugs forces cyber pros to rethink security boundaries

Malware trapped in Docker or other containers now has no shortage of Linux kernel vulnerabilities to pave its escape route.
Read more about Onslaught of Linux kernel bugs forces cyber pros to rethink security boundaries

Hackers hit EU data transfer platform as tech sovereignty push grows

The attackers say they’ll release the data in 5 days.
Read more about Hackers hit EU data transfer platform as tech sovereignty push grows

ShinyHunters insists it is “fine” after FBI arrests alleged leader

“Our operations remain completely fine as it should be and WILL be.”
Read more about ShinyHunters insists it is “fine” after FBI arrests alleged leader

Major McDonald's data leak exposes 28 million customer details

Over 40 million records, most of them customer-related, were leaked online.
Read more about Major McDonald's data leak exposes 28 million customer details

Public GitHub code reveals a major issue: over 500,000 secret keys are exposed

GitHub effectively detects many hardcoded secrets, but still has a huge blind spot for Gemini keys.
Read more about Public GitHub code reveals a major issue: over 500,000 secret keys are exposed

China’s AI agents can lie and scheme – just like their US rivals

There’s no evidence that Chinese-powered agents independently escaped to the wider internet or evaded shutdown, however.
Read more about China’s AI agents can lie and scheme – just like their US rivals

Russian-linked forensics software was used by London police and throughout Europe

London's Met force has paused its contract with Oxygen, pending a review.
Read more about Russian-linked forensics software was used by London police and throughout Europe

Popular games on Google Play contain trackers from Russia, China, and Israel, study finds

The mobile gaming industry is built on an insidious surveillance network, Proton says.
Read more about Popular games on Google Play contain trackers from Russia, China, and Israel, study finds

What can a person find about you in an hour?

We leave a surprising number of breadcrumbs that can be pieced together remarkably quickly.
Read more about What can a person find about you in an hour?

Critical Authlib authentication bypass flaw leaves countless apps in danger

Authlib maintainers could not be reached to coordinate the vulnerability.
Read more about Critical Authlib authentication bypass flaw leaves countless apps in danger

North Korea’s unexpected weapon: women watching Friends

North Koreans weaponize “made in America” staples – Friends and ChatGPT – to attack Americans.
Read more about North Korea’s unexpected weapon: women watching Friends

A fake journalist used a real Calendly link to phish a tech founder

One genuine link, one fake app, one hijacked account.
Read more about A fake journalist used a real Calendly link to phish a tech founder

Apple patches zero-day exploit possibly used in “extremely sophisticated” attacks

The bug in CoreGraphics is probably being exploited in spyware like Pegasus.
Read more about Apple patches zero-day exploit possibly used in “extremely sophisticated” attacks

Pentagon confirms data breach: over 3 million people affected

The unauthorized intrusion lasted for months.
Read more about Pentagon confirms data breach: over 3 million people affected

Mass exploitation of Magento and Adobe Commerce critical flaw: 3,800+ online shops hacked

A hacker calling itself Lockster hacked thousands of stores but forgot to lock its own server.
Read more about Mass exploitation of Magento and Adobe Commerce critical flaw: 3,800+ online shops hacked

Citrix NetScaler under active zero-day attack: critical patches available, 22K servers exposed

Administrators are urged to investigate systems for potential compromise.
Read more about Citrix NetScaler under active zero-day attack: critical patches available, 22K servers exposed

Flink hackers turn to customers, demanding ransom to keep their data off the dark web

They’re squeezing customers for €10 after demanding €238,000 from the company.
Read more about Flink hackers turn to customers, demanding ransom to keep their data off the dark web

ShinyHunters targeting Oracle zero-day days after FBI attack, Google warns

A new ShinyHunters campaign is bypassing firewall defenses and deploying a newly discovered backdoor – is this how they breached the FBI?
Read more about ShinyHunters targeting Oracle zero-day days after FBI attack, Google warns

Kiteworks to customers: shut down your systems; cyberattack imminent

A zero-day warning has been sent via email to customers worldwide, industry insiders say.
Read more about Kiteworks to customers: shut down your systems; cyberattack imminent

Police staff data feared stolen in Welsh cyber raid