UK’s biggest carmaker seeks to cut costs over next two years, amid slow transition to electric, financial hit from cyber-attack
Category: EN
Palo Alto PAN-OS Vulnerability Enables Arbitrary Code Execution as Root User
Palo Alto Networks has disclosed a high-severity PAN-OS vulnerability that could allow an unauthenticated remote attacker to execute arbitrary code with…
AI and Human Risk Reshape CISO Priorities in 2026
AI and human risk are reshaping CISO priorities as board expectations grow.
Britain reboots its space strategy with £7.8B already on the launchpad
Cross-government plan combines civil ambitions with an increasingly military view of orbit
Gigabud Creates Android Work Profiles to Hide From Banking App Malware Checks
The Gigabud banking trojan now installs a second Android app that creates a work profile on an infected phone and drops a tampered banking app inside it,…
FBI Publishes First Cyber Strategy
The FBI published its inaugural Cyber Strategy on September 9, marking a significant shift in how the agency approaches cyber threats.
Belgian Police Arrest China-Born Man On Tech Espionage Charges
Authorities arrest former senior semiconductor researcher on charges that he simultaneously ran competing Chinese chip producer
Check Point Discloses Two 9.8-Rated VPN Certificate Flaws Enabling Unauthenticated RCE
Check Point has patched two critical vulnerabilities in the way its firewall and management products handle VPN certificates. The company says both could…
WordPress Adds Automated Security Review for Plugins
WordPress has deployed an automated security review system that evaluates every plugin release before distribution through the WordPress.org update API.
OpenAI Agents Take Over German Wiki Site
OpenAI acknowledges its agents repurposed German wiki as message board in May incident that was not previously disclosed
VMware ends public VDDK downloads
VMware has quietly discontinued public downloads of its Virtual Disk Development Kit (VDDK), a software development kit that provides APIs for accessing…
US Regulator Probes Tesla Over Cybercab Launch
US vehicle safety regulator opens audit process after Tesla puts Cybercab onto Austin streets with no human controls
NeuroCyber granted charity status to expand support for neurodivergent talent in cybersecurity
NeuroCyber, the organisation dedicated to improving opportunities and career outcomes for neurodivergent individuals across the cybersecurity profession,…
Critical Check Point VPN Vulnerabilities Enable Remote Code Execution Attacks
Check Point Software has disclosed and patched two critical VPN-related vulnerabilities, CVE-2026-85102 and CVE-2026-85103, both carrying a maximum CVSS…
How to Use BloodHound Active Directory Setup Attack Path Analysis
By HOC Team | Last updated: September 10, 2026 | Read time: ~24 min How to Use BloodHound…
F5 BIG-IP APM Malware Installs a PHP Web Shell Into Memory, Escaping Disk Scans
Sophos X-Ops has found an advanced Linux rootkit that can conceal a PHP web shell completely in server memory, which makes it harder for traditional…
Xiaomi Launches Foldable To Compete With Upcoming iPhone
Beijing-based Xiaomi launches 18 Fold wide-format foldable smartphone, as companies flock to popular category
Hackers Can Turn Vulnerable LiteLLM AI Gateways Into Root Access and Cloud Credential Theft
Nearly one in 10 internet-exposed LiteLLM AI gateways accepted the widely documented default master key, sk-1234, or required no authentication, creating…
PEEP browser backdoors, $320M Liquid exploit, BigBear beats MFA
PEEP turns browsers into backdoors Liquid loses $320M, hackers play hero BigBear claws past MFA Get the full show notes here:…
Hackers Pose as Domain Controllers to Steal Active Directory Password Hashes
Threat actors are increasingly abusing Active Directory replication to impersonate domain controllers and steal password hashes from enterprise networks.…