#news


From 17,000 to 1.1 Million Assets: How Lumen Technologies Rebuilt Exposure Management at Scale

Jul 10, 2026 // 16:45

Most enterprises assume their asset inventory is close enough to accurate. The evidence suggests otherwise. According to a survey of over 600 security leaders in […]

Unpatched XRING Flaw in XQUIC Lets Remote Clients Crash HTTP/3 Servers

Jul 10, 2026 // 16:45

A single wrong variable on one line in XQUIC, Alibaba’s QUIC and HTTP/3 library, lets any remote client crash the server with a short burst […]

New MODBEACON RAT Uses gRPC Streaming for Encrypted C2 Traffic

Jul 10, 2026 // 16:45

The China-linked cybercrime group known as Silver Fox has been attributed to a new Rust-based remote access trojan (RAR) called MODBEACON. Chinese cybersecurity company QiAnXin […]

Ransomware Negotiator Gets 70 Months in Prison for Aiding BlackCat Attacks

Jul 10, 2026 // 11:47

A 41-year-old former ransomware negotiator has been sentenced to nearly six years (i.e., 70 months) in prison in the U.S. for their role in conspiring […]

OpenMandriva Linux says contributor tried to sabotage the project

Jul 10, 2026 // 01:16

The OpenMandriva Linux project announced that it was the target of an attempted act of internal sabotage after a dispute among contributors. The attempted destructive […]

Microsoft expects more Windows security updates from AI-discovered flaws

Jul 9, 2026 // 23:17

Microsoft says Windows users should expect to see an increase in security updates as the company increasingly relies on artificial intelligence to discover vulnerabilities in […]

New Helix vishing group emerges in SharePoint data theft attacks

Jul 9, 2026 // 23:17

A new data-extortion group called Helix is using identity-focused tactics such as voice phishing (vishing), device code phishing, and multi-factor authentication (MFA) abuse to steal […]

Injective SDK on npm infected with cryptocurrency wallet stealer

Jul 9, 2026 // 23:16

Hackers compromised the Injective Labs SDK project’s GitHub repository and used it to publish a malicious package on the Node Package Manager (npm) that stole […]

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Jul 9, 2026 // 23:03

Microsoft has taken apart a destructive Windows backdoor it calls GigaWiper. What stands out is how it is built: not one tool but three older […]

Dormant GitHub Accounts Help Attackers Blend In While Mapping Corporate Orgs

Jul 9, 2026 // 23:03

Datadog Security Labs is warning of “several overlapping campaigns” that are systematically enumerating corporate GitHub organizations, repositories, and user accounts through the GitHub API. “Operators rely […]

Previous 1 … 228 229 230 231 232 … 388 Next