Attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs. They then used insecure Active Directory…
Category: EN
My Journey to the Center of America’s Political Spam Text Hell
I’ve gotten nearly 2,000 campaign fundraising texts that were meant for someone else. I tried to find out why—and uncovered a labyrinth of politicians,…
Hackers Target Supermarket Refrigeration Systems Across Sweden, Raising Freezer Temperatures to 55°C
Hackers have disrupted refrigeration systems at several ICA and Coop supermarkets across Sweden, destroying food and prompting temporary closures. One…
Hackers Pushing Remote Access Tool Through Fake Adobe Acrobat Pages
Fake Adobe Acrobat pages distribute signed ScreenConnect installers configured for attacker-controlled remote access to Windows PCs, CloudSEK’s…
Additional Ivanti Connect Secure zero-days exploited in the wild (CVE-2026-111357, CVE-2026-118527)
Overview On October 29, 2026, Ivanti updated its security advisory for Ivanti Connect Secure (ICS) to include two additional vulnerabilities and released…
Government Linux Servers Targeted With SysGoRAT and Suspected AI-Generated Scripts
Cybersecurity researchers have disclosed details of a cyber espionage campaign specifically targeting Linux infrastructure associated with government…
Hackers Target Emergency Alert Apps in Ukraine and Russia, Sending Fake Nuclear Attack Warnings
Hackers compromised emergency alert applications in Ukraine and Russia, distributing fabricated nuclear and radiation warnings as officials sought to…
US Military Probes Freezer Failures, After French Hack
Pentagon investigators look into at least six simultaneous freezer failures at US military bases, after French supermarket fridges hacked
Hackers Weaponize Open-Source CyberStrikeAI Framework to Launch AI-Powered Network Intrusions
Hackers are abusing CyberStrikeAI, an open-source penetration-testing framework, to orchestrate network intrusions against educational organizations…
Chainalysis Discloses Data Breach Following AI-Driven Cyberattack
The attackers used offensive agentic techniques to access the company’s systems and internal tools.
Researchers Discover High-Severity ChatGPT Flaw That Exposed Private Conversations to Attackers
Researchers found a chain of flaws that turned an ordinary public ChatGPT share link into attacker-controlled JavaScript running inside the victim’s…
FBI pins $6.3 billion Binance crypto heist on North Korea while scammers circle anxious users
North Korea was behind the theft of more than $6 billion in cryptocurrency from Binance, the FBI has confirmed. “The Federal Bureau of Investigation (FBI)…
Seven egregious failures of modern web tech
The modern web is a miracle of engineering, but its history is littered with brilliant concepts that flamed out in execution. For every innovation that…
Hackers Send Fake Nuclear Threat Alerts to Ukrainian and Russian Citizens
Hackers reportedly hit Ukraine ‘s and Russia ‘s emergency alert apps, sending fake nuclear and attack warnings and raising concerns over public safety.…
Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features
WIRED uncovered some 400 apps and websites linked to Chinese-language developers that look like regular AI tools but had secret features that let users…
Apple Issues Urgent Security Alerts Over Mercenary Spyware Attacks in 99 Countries
Apple has started sending a new round of threat notifications to users across 99 countries, warning them about targeted mercenary spyware attacks,…
3 questions for securing AI agents
Are your AI agents leaking sensitive data? Ask these three essential questions.
FBI Attributes Binance Heist to North Korea’s TraderTraitor
The FBI has blamed North Korean APT group TraderTraitor for the world’s biggest cyber heist
How fixing our data infrastructure before it broke us gave back 6,200 engineering hours
Just about every CTO at a growth-stage company that I know is carrying an infrastructure problem they are quietly deciding not to look at. The system…
Chainalysis Confirms Cyberattack as Hackers Exploit Vulnerabilities to Access Internal Tools
Chainalysis has confirmed a cybersecurity incident in which an external actor gained unauthorized access to the company’s systems and internal tools…