#news


WordPress Click2Shell flaw lets hackers execute PHP on the server

Sep 22, 2026 // 00:17

Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery (CSRF) vulnerability dubbed ‘Click2Shell’ that affects the platform’s Core […]

CISA alerts of active exploitation of three Linux kernel flaws

Sep 22, 2026 // 00:16

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. The three […]

Google Fined €403 Million Over GDPR Violations Tied to Location Data

Sep 22, 2026 // 00:12

Google has been fined €403 million for breaking the EU’s data protection law, the GDPR, in the way three of its features handled people’s location […]

Contagious Interview Campaign Compromises 30,000 Devices, Steals $10.71M in Crypto

Sep 22, 2026 // 00:12

The North Korean threat actors behind the Contagious Interview campaign have compromised at least 30,000 devices located in more than 100 countries and siphoned funds […]

Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

Sep 22, 2026 // 00:12

A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer […]

Google fined €403 million over location data privacy violations

Sep 21, 2026 // 18:56

Ireland’s Data Protection Commission (DPC) has fined Google €403 million ($463M) for multiple GDPR violations related to processing users’ location data. The agency launched an […]

⚡ Weekly Recap: Cisco 0-Day, AI Agent RCE, ClickFix Attacks, ClickFix Surge, and Browser Hijacks

Sep 21, 2026 // 17:32

A browser. A plugin. A package. A login screen. Normal stuff. That is basically the problem this week. The trouble keeps showing up inside things […]

TASK#STOMP PowerShell Backdoor Steals Documents, Wi-Fi Passwords, and Clipboard Data

Sep 21, 2026 // 17:22

Cybersecurity researchers have disclosed details of a new campaign dubbed TASK#STOMP that delivers a PowerShell backdoor designed to harvest sensitive data from compromised hosts. The […]

FBI’s CJIS v6.1: What Security Teams Need to Know.

Sep 21, 2026 // 17:16

The FBI’s CJIS Security Policy has been through a significant period of change. Version 6.0, released on December 27, 2024, completed the policy modernization effort […]

Microsoft reminds admins to migrate Entra ID users to passkeys

Sep 21, 2026 // 16:16

Microsoft has reminded administrators to migrate Entra ID users to phishing-resistant methods, such as passkeys, to avoid sign-in disruptions after it retires SMS first-factor sign-in […]

Previous 1 … 26 27 28 29 30 … 388 Next