Security
Tails Linux critical vulnerability allows websites to deanonymize users: emergency patch available
The exploit can be leveraged by state-sponsored attackers or hacking firms.
Read more about Tails Linux critical vulnerability allows websites to deanonymize users: emergency patch available
The bizarre Credit Agricole phishing campaign: how the scammers did it
Scammers competed to see who would earn more from their victims.
Read more about The bizarre Credit Agricole phishing campaign: how the scammers did it
Another massive NPM worm: 444 packages with 2 billion monthly downloads infected with malware
I wake up, there’s a new supply chain attack.
Read more about Another massive NPM worm: 444 packages with 2 billion monthly downloads infected with malware
Michigan, Georgia confirm public water system attacks linked to Iranian hacking spree
Four US states now confirm attacks – but the FBI says at least 7 were targeted.
Read more about Michigan, Georgia confirm public water system attacks linked to Iranian hacking spree
Tor launches new Android app for volunteers to share their internet connections and help millions to access the open internet
146,000 users already voluntarily contribute their internet connection for those who can’t access the open internet.
Read more about Tor launches new Android app for volunteers to share their internet connections and help millions to access the open internet
Google’s synced passkeys can be easily stolen with basic malware, researchers find
Google’s unbreakable passkeys cracked with a plain-text key from Chrome logs.
Read more about Google’s synced passkeys can be easily stolen with basic malware, researchers find
Businesses stop accepting screenshots as proof after AI makes fake bank transfers too easy
Screenshots are easy to manipulate – verification is essential.
Read more about Businesses stop accepting screenshots as proof after AI makes fake bank transfers too easy
Polish retail giant Żabka breached via external service provider: data up for sale
Hackers are only asking a “symbolic” €5,000 for the data.
Read more about Polish retail giant Żabka breached via external service provider: data up for sale
Onslaught of malware hits Arch Linux's major AUR repository, all uploads suspended
Users are increasingly concerned about malware-source repositories.
Read more about Onslaught of malware hits Arch Linux's major AUR repository, all uploads suspended
FBI now says Minnesota water hacks part of 7-state Iranian cyber campaign
Some attacks caused pressure loss and flooding as hackers seized control of exposed PLC devices.
Read more about FBI now says Minnesota water hacks part of 7-state Iranian cyber campaign
AI might have helped hackers steal $38M in bitcoin
Coldcard's firmware flaw may have given AI the keys
Read more about AI might have helped hackers steal $38M in bitcoin
Hackers threaten the EU directly: end Chat Control or else
A threat actor frames their cyber-threats as a political manifesto: “We will not remain silent in the face of this unacceptable attack on our fundamental freedoms.”
Read more about Hackers threaten the EU directly: end Chat Control or else
pfSense co-creator building new open-source firewall platform: “will correct the mistakes of the past”
Two decades after pfSense, its co-founder starts over from scratch.
Read more about pfSense co-creator building new open-source firewall platform: “will correct the mistakes of the past”
Self-propagating AI worm found inside Microsoft Copilot for Word
Potentially the first AI worm to infest a mainstream workspace.
Read more about Self-propagating AI worm found inside Microsoft Copilot for Word
Hackers claim data breach that could expose millions of Spanish pensioners
Records are being offered for sale online.
Read more about Hackers claim data breach that could expose millions of Spanish pensioners
Beware: attackers now using real Microsoft sign-in screen for phishing
Every screen the victim sees is real.
Read more about Beware: attackers now using real Microsoft sign-in screen for phishing
Iran hackers hit 30 Minnesota public water systems in coordinated cyberattack
The suspected hackers have breached US water infrastucture before – and CISA has just warned their targets are expanding.
Read more about Iran hackers hit 30 Minnesota public water systems in coordinated cyberattack
Is it just hype? AI-discovered bugs aren’t actually a treasure trove for crooks, research shows
Now, where’s that wave of cyberattacks?
Read more about Is it just hype? AI-discovered bugs aren’t actually a treasure trove for crooks, research shows
INC Ransom attack chain against V-Silicon
Based on the exposed tooling, the Cybernews team was able to reconstruct a partial attack chain of INC ransom. Phase...
Read more about INC Ransom attack chain against V-Silicon
We knew about V-Silicon attack before it was claimed: This is how hackers exposed themselves
Attackers were preparing to target the industrial controls of semiconductor factories.
Read more about We knew about V-Silicon attack before it was claimed: This is how hackers exposed themselves
