Full-text search across article titles and summaries. Refine with sector, year, content type, and reading-time filters.
Gamers Nexus found LG TVs allegedly recording audio after voice features were enabled, including during standby. Tests reportedly uncovered plaintext transcripts, IP addresses, location data, nearby Wi‑Fi details, and local-device inventories. The team also alleged offline audio capture and a possible remote-code-execution flaw. LG denied ambient recording and said ACR advertising use requires opt-in consent.
White-hat hackers drained ~$320 million from Liquid Network's federation wallet over the weekend.
Ohio man James Strahler received the first Take It Down Act conviction, with a 15-year sentence for distributing 3,000+ real and AI-generated child sexual abuse images and cyberstalking victims.
host-level code execution.
Sponsored
What do cybercriminals look for before they strike? Former FBI Special Agent Jeff Lanza and Flexential VP of Cybersecurity Services Will Bass share lessons from real-world cases in OUTSMARTING CYBERCRIME: LESSONS FROM AN FBI INSIDER [5]. [5] Learn how attackers identify vulnerabilities, exploit human behavior, and gain a foothold, plus get practical insights for reducing risk, strengthening cyber resilience, and preparing your organization to respond and recover when prevention isn't enough.
Calif has demonstrated a zero-click worm that takes over a WeChat account via an unanswered VoIP call, then uses that account to call the victim's contacts. This exploit relies on a memory corruption bug in WeChat's VoIP stack and requires the attacker to be on the victim's friend list, which is a weak barrier since one compromised friend can lead to further exploitation. Tencent has mitigated this issue in server-side updates and in client versions Android 8.0.77 and iOS 8.0.76, so users should enforce these updates and reconsider trusted-contact privileges in messaging apps.
Security researchers gained access to an Elasticsearch cluster containing an Advanced Passenger Information System (APIS) database with records belonging to 220M passengers and flight crew members. The researchers received a 401 when trying to access the cluster via the public internet but could reach the database, which accepted default credentials via a cloud-based access path. The data includes passengers' and crew members' names, dates of birth, sex, nationalities, passport or travel document numbers, document expiration dates, and issuing countries.
There is a malware campaign targeting F5 BIG-IP APM devices that exploits a critical RCE vulnerability and injects a fileless web shell. A distinct installer deploys the payload by infecting the Apache executable and modifying SELinux configurations. ESET researchers identified the malware as PoisonedRefresh.
Researchers demonstrated attacks against customer-support agents through email spoofing, duplicate From headers, out-of-office replies, and email-address parser mismatches. These flaws can trigger profile changes, refunds, phishing emails, or account data disclosure. Alternatively, other paths reset OTP rate limits, abuse IVR checks, and steal third-party reset codes from monitored support inboxes. Hidden instructions in alternate MIME parts, CSS-hidden text, and attacker-controlled images can mislead automated processing. Untrusted forum comments and namespace-controlled sitemap pages can also poison support knowledge bases.
Oxide published its internal design for protecting rack data at rest, rooting everything in a Shamir-shared rack secret that no attacker can recover without stealing at least K sleds or M.2 drives. Per-drive ZFS wrapper keys are derived with HKDF using SHA3-256 and an info string built from the PCI vendor ID, drive model, and serial number, so compromising one disk key leaves the others intact. The harder problem is rotation across a distributed two-phase commit: the dealer encrypts the epoch N-1 rack secret under a key derived from the epoch N secret using chacha20poly1305, keeping the old secret unrecoverable until the new configuration commits.
Check Point Research discovered that ChatGPT code-execution containers from different accounts were using package metadata as a covert cross-account channel because these containers could read and write item properties on the same internal JFrog Artifactory instance. This allowed attackers to deliver a planted instruction through a shared conversation, a custom GPT, or a pasted prompt. The model would then run a hidden second task stream in the same turn, pulling data from the victim's connected Gmail while the visible answer stayed clean. Although OpenAI has decommissioned that Artifactory instance, defenders should enable per-session isolation for any mutable state in shared internal services and review default low-risk reads configuration.
All-in-one OSINT platform — 22+ modules, AI analysis, real-time dashboard, and OPSEC scoring. Scan domains, IPs, emails, phones, and usernames.
Sage is a security tool from Gen Digital that intercepts tool calls made by AI coding assistants and blocks dangerous ones before they execute. It features URL reputation checks against a cloud service, 300+ local YAML heuristics for risky commands and credential exposure, and two-tier prompt injection detection combining heuristics with a fine-tuned ML model. Sage is supported in many harnesses like Claude Code, Cursor, VS Code, OpenClaw, and OpenCode, with npm or marketplace installs per platform.
DecBench is a living benchmark from Noelo Lab at the University of Georgia that scores decompilers and LLMs on exact source recovery. It measures perfect-match percentage across datasets covering control flow structure, type recovery, and recompilability, with new tools added to the leaderboard as they ship.
PREY-0058 targets executives through fake IT help-desk calls and authentication-themed domains. Its AitM pages capture Microsoft 365 credentials, MFA approvals, and session tokens. Operators replay tokens through residential proxies, then enumerate SharePoint and Entra ID. They bulk-exfiltrate SharePoint, OneDrive, Exchange, and Box data before issuing extortion demands. Defenders are advised to watch for proxy token replay, mailbox harvesting, and new MFA-themed domains.
The National Audit Office named cyberattacks as a threat to the UK food supply chain. Marks & Spencer estimates its April 2025 attack cost £136 million after warehouse systems were disconnected, and the Co-op confirmed theft of 6.5 million member records. Several food supply chain organizations cited the substantial investments businesses are making to manage the threat and incidence of cyber-attacks.
This walkthrough covers passkey registration and login end-to-end, from server-issued challenges and stored public keys to SimpleWebAuthn verification in Node. Phishing resistance comes from RP ID scoping, which browsers enforce, but servers must still verify alongside exact origin, challenge freshness, and user verification. Teams tend to underestimate single-use challenges, concurrent login tabs, credential management screens, and recovery paths that end up weaker than the login they back up.
Sponsored
Learn how cybercriminals identify vulnerabilities, exploit human behavior, and gain a foothold in OUTSMARTING CYBERCRIME: LESSONS FROM AN FBI INSIDER [18], with practical insights for strengthening cyber
Grindr agreed to pay £26m to settle a UK privacy claim involving 12,000 users as the suit alleged pre-2020 sharing of sensitive data, including HIV status, with advertising firms.
Dark Atlas has documented THost9, an Android RAT whose worm component scans for internet-exposed ADB services and authenticates with prepared keys to install itself, giving operators shell access, file transfer, and tunneling on affected phones and Redroid containers.
Microsoft has released 974 patches, its largest batch ever, including two actively exploited privilege-escalation zero-days and 113 critical vulnerabilities.
Sponsored
Most security programs still frame threat hunting as a search for known indicators of compromise. Leaders approach it by trying to prove a hypothesis [5]like, “Could an attacker be moving laterally between internal systems?” or, “Is a service account being used outside of expected patterns?” To answer those questions, you need context, sequence, and evidence. Logs and endpoint data are fragmented. You need network visibility that can expose hidden and unauthorized activity [6]. NETSCOUT closes the intelligence gap by generating continuous, packet-level network evidence analyzed at the point of collection.
Unauthenticated attackers can execute code on internet-exposed N-central RMM servers through a low-complexity attack exploiting CVE-2026-86218. Huntress has flagged it as a potential zero-day after finding a compromised customer instance whose logs had already rotated. Shadowserver counts nearly 1,500 exposed N-central servers, most in the United States and Europe. On-premises operators need N-central 2026.3 Hotfix 4 immediately, since HF3 systems remain vulnerable to this flaw despite last week's fixes for the authentication-bypass pair CVE-2026-86206 and CVE-2026-86207.
CVE-2026-6471 affects PostgreSQL 9.4 through 18. A low-privilege REPLICATION account could supply an unchecked output-plugin path, load attacker code, gain PostgreSQL superuser access, and establish persistence, while Windows targets could fetch a DLL over SMB. It is recommended to patch PostgreSQL, remove unused replication privileges, restrict pg_hba.conf, block outbound SMB and NFS, and monitor suspicious replication slots.
Online math learning software Mathspace disclosed a data breach affecting over 1M students, guardians, school staff, and Mathspace staff from Australia and New Zealand. The attackers exploited a vulnerability in a self-hosted Metabase instance used for internal reporting. Mathspace did not disclose exactly what data was breached but stated that academic records, authentication credentials, or any data linking records to a school (other than potentially email domains) were not leaked.
A red-team loader chains O_TMPFILE with execveat(AT_EMPTY_PATH) to run an ELF that never gets a directory entry, allocating a real inode on /tmp with no dentry so ls, find, inotify, and fanotify never see it, then reopening the fd read-only through /proc/self/fd/ to clear ETXTBSY and executing it directly with no path string ever constructed. The technique sidesteps fileless detection built for memfd_create because it produces none of the expected artifacts: no memfd: prefix, no 00:01 device, no syscall 319, and the only residual signal is the (deleted) suffix that countless legitimate open-unlink-exec programs also generate. Defenders should stop keying fileless detection on memfd_create specifics and instead watch execveat with AT_EMPTY_PATH against anonymous /tmp/# (deleted) executables, correlating prctl(PR_SET_NAME) renames and loaders that unlink /proc/self/exe, since this combination is absent from Elastic's FENIX 15-technique matrix.
This article explains how access control addresses the key questions an auditor has about logs by introducing specific mechanisms: hash chains for integrity, Merkle trees with signed checkpoints for an append-only history, and trusted time anchors like RFC 3161 or OpenTimestamps. It provides an implementation perspective on creating a cryptographically verifiable audit trail, including data structures, proof algorithms, and working Rust code. The guidance is based on established standards.
Wiz Research's Red Agent autonomous security research tool discovered a vulnerability in a GitHub Actions workflow in the snowflakedb/snowflake-connector-net repository that allowed attackers to gain access to Snowflake's internal Jira. The vulnerability stemmed from a regression introduced in a PR that was reviewed and approved by GitHub Copilot, enabling code execution via template injection. Users of AI-assisted code generation tools should rigorously review code for introduced vulnerabilities. In this case, Copilot introduced a vulnerability by replacing a safe env + jq parsing pattern with direct string interpolation.
Sponsored
THE REAL QUESTION: CAN YOU TRUST WHAT THEY DO? AvePoint's live AI Virtual Summit [15]shows how to govern agentic AI using the trusted governance methods you already know, turning AI potential into
RAPTOR is an autonomous security research framework built on Claude Code that integrates static analysis, binary analysis, LLM-driven vulnerability validation, exploit generation, and patch writing into a single workflow. It ships over 200 custom Semgrep, Coccinelle, and CodeQL rules, a six-stage exploitability validation pipeline that filters scanner noise before a finding is called real, and optional Z3 pre-screening that drops provably unreachable dataflow paths. Subprocesses that handle untrusted repositories are sandboxed using Linux namespaces, Landlock, and seccomp, and the analysis layer accepts Anthropic, OpenAI, Gemini, Mistral, or local Ollama models with a per-run cost cap.
OpenAI has committed $1 billion in subsidized Daybreak access, training, and technical support for resource-constrained defenders, with consumption targeted over the next six months and prioritizing water and wastewater utilities, electric grid operators, state and local governments, community banks, nonprofits, and open-source maintainers. Daybreak Blue covers routine defensive work on mainline models. Daybreak Red provides approved organizations with specialized cyber models. Roughly 2,000 organizations have already onboarded, and more than 35 partner products are shipping through the Daybreak Defense Network.
North Korea has been shown to run offensive cyber as a self-funding arm of the state, with theft revenue estimated at over a billion dollars annually feeding sanctioned weapons programs. Sekoia and Kudelski Security mapped the hierarchy behind that model, covering the GRIB (ex-RGB), the NIA (ex-MSS), renamed in June, and the decomposition of the Lazarus umbrella into APT38, Andariel, Famous Chollima, and the Sleet sub-clusters. The paper also traces the enabling layer of IT worker units, Chinese and Russian academic pipelines, and front companies such as Ryonbong and Chinyong, while cautioning that constant institutional reshuffling limits how long any DPRK org chart stays accurate.
JSCeal is distributed via fake TradingView installers advertised on Facebook and Google. It harvests browser passwords, cookies, OAuth tokens, and profile information from Chromium browsers. Stolen Google cookies can restore authenticated sessions and bypass login screens. The malware also logs keystrokes, takes screenshots, and sets up a local proxy that manipulates traffic for Binance, Bybit, Ledger, and various other services.
Attackers withdrew about 4,000 BTC, roughly 95% of Liquid's federation wallet. Liquid disabled bridge nodes and asked exchanges to halt L-BTC deposits and withdrawals. The attackers used SideSwap's peg-out process, though Liquid says no Peg-out Authorization Key was compromised. They claim they will return most funds after every node receives a fix.
Sponsored
100+ sessions, five tracks, top speakers, hands-on labs, and
ConnectWise disclosed an unpatched file transfer flaw affecting both cloud and on-premises ScreenConnect deployments.
FulcrumSec leaked about 550GB allegedly stolen from Manchester Airports Group after MAG declined a ransom.
Natural Resources Wales disclosed a spreadsheet containing diversity-monitoring data for people employed between April 2013 and March 2018.
JetBrains is urging users of Cadence, its hosted cloud computing service, to revoke and rotate all credentials after unidentified attackers exploited CVE-2026-63077 (CVSS 9.8) to breach its own environment. The vulnerability stems from deserializing untrusted data and allows an unauthenticated attacker with access to a TeamCity server to bypass authentication checks and execute arbitrary operating system commands with the privileges of the TeamCity server process. Attackers reached a 2024 Cadence backup holding AWS IAM credentials, S3 files, PyCharm-synced source code, and personal data, so defenders should treat all executions as untrusted and audit connected AWS accounts, registries, and repositories for activity since August 8.
Threat actors are chaining CVE-2026-81578 and CVE-2026-82078, an authentication bypass and remote code execution pair in PaperCut, to steal credentials from K-12 schools and major universities across the US and Europe. Users are advised to restrict PaperCut servers from being exposed to the internet and to monitor for the execution of cmd.exe, powershell.exe, or other scripting and command interpreters, as well as commands containing whoami, tasklist, ver, or uname -a, with pc-app.exe as the parent process.
Thomson Reuters found unauthorized access to C-Track files in March. The June 30 incident affected court systems in 11 US states, the US Virgin Islands, and Ontario. Exposed records may contain names and personal information. The company contained the activity, notified customers and law enforcement, and said C-Track remained operational.
Microsoft researchers observed a high-volume phishing campaign using invisible Unicode tag characters, a technique popularized in AI prompt injection research as ASCII smuggling. Rather than hiding instructions from people while exposing them to AI models, the attacker used the characters to split financial lure words so email filters could not parse them, turning "funding" into fun, an invisible tag character, then ding. The code points come from the deprecated Unicode Tags block, U+E0000 to U+E007F, which renders as nothing at all, and Microsoft surfaced the campaign while hunting for prompt injection in Defender for Office 365, where the first version of the signature kept firing on the England, Scotland, and Wales flag emoji because each is built from a base flag code point plus an invisible tag sequence. Defenders should strip invisible Unicode before content signatures run, treat unexplained tag characters as a high-confidence anomaly, and apply the same normalization upstream of any AI assistant that ingests email.
Anthropic paused cyber evaluations after three July incidents exposed real systems through third-party environments. It added real-time classifiers, stronger sandbox isolation, and outbound network blocks, while partners testing reduced-safeguard models must verify isolation, define scope, validate tasks, and stop violations. The company also froze RL environment changes, flagged over 10% for defects, and rebuilt review controls.
A researcher at ZeroTrace Lab went down a rabbit hole to try and understand how they can disable the Chrome Remote Desktop connection banner after it was bothering them on a computer they remote into. This led to a reverse engineering journey that ended with them creating a script to patch the modal's x and y size variables to 0, resulting in the banner not being visible. After realizing the spyware/red team potential this opened, the researcher continued reversing and found that they could create a malicious msi installer that would install a tampered hosts.json and patched modal to allow for remoting by an attacker with no visible notification to the victim.
Hetty is an HTTP toolkit for security research. It aims to be an open-source alternative to commercial software like Burp Suite Pro, with powerful features tailored to the needs of the infosec and bug-bounty community.
Pigeon allows creating delegated authority for AI agents. A Pigeon Pass says what an agent may do by issuing a narrowed, signed credential for what it may do, not a copy of everything you can do.