France blames Iran for supermarket fridge attacks. What’s known, what remains unclear, and how to secure exposed controllers. French Foreign Minister…
Tag: EN
Vulnerability that lets hackers SSH into Linux devices is under active exploitation
“*sshole” poses a serious threat to Internet security.
Help defend against memory poisoning in Amazon Bedrock AgentCore with multi-layer write validation
Amazon Bedrock AgentCore Memory helps AI agents maintain context across sessions through persistent short-term and long-term memory. Because memory…
Investment scams with potential victims in at least 50 countries: over 100 servers seized
Led by the German Itzehoe Public Prosecutor’s Office (Staatsanwaltschaft Itzehoe), the operation targeted a company suspected of supplying fraudulent…
Binance calls alleged “ShinyHunters” post a scam attempt
Sergiu Gatlan reports: Binance, the world’s largest crypto exchange, has denied claims of a new security breach made by a threat actor using the…
Nvidia Backs Jensen Huang as Board Examines Espionage Reports
Nvidia backs Jensen Huang as its board investigates espionage reports. Here’s what IT buyers should watch on security, supplier risk, and AI chip access.
France blames Iran for mass-hacks targeting freezers in grocery stores and blood banks
France’s foreign minister blamed Iran for launching at least two waves of cyberattacks targeting industrial refrigerated and freezer units across France…
France blames Iranian hackers for supermarket attacks that sparked fires
France has linked October cyberattacks that disrupted refrigeration systems at more than 700 supermarkets and other retail locations to Iranian…
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for…
Vanderbilt cybersecurity incident impacting campus devices and systems
Vanderbilt University announced a cyberattack, warning students and employees that campus devices and systems may be impacted by the incident.
Between Two Nerds: Why PHP2Shell fizzled
In this edition of Between Two Nerds Tom Uren and The Grugq talk about why PHP2Shell failed to live up to its hype. A critical bug in a very widely used…
France blames Iran for fridge cyberattacks, says some caused fires
In the first attribution since the October attacks, the French authorities identified the perpetrators as part of Shahid Kaveh, an IRGC cyber unit…
Attackers Crash Claude’s ‘Office Party’ Flaw to Run Malicious Code on Linux
Attackers can exploit a flaw in Claude’s document-processing tool by creating a temporary file that Anthropic’s AI assistant can access and run on a…
Notepad++ 8.9.9 Released With Fixes for 6 Vulnerabilities Allowing Plugin Command Execution
Notepad++ released version 8.9.9 on November 6, 2026, fixing six security flaws across Windows message handling, protected file saving, clipboard…
Attackers Searching for SAP Netweaver Webshells, (Mon, Nov 9th)
Just saw a new (to me) URL in our honeypot data today:
Alpine Linux SSH Flaw: Long Passwords Can Bypass Authentication
An OpenSSH flaw lets oversized passwords bypass authentication on certain Alpine Linux systems. Learn who is affected, how to patch, and what to check.
Hackers Exploit Qubole’s Trusted AWS Access to Breach Customer Accounts and Steal Data
An attacker broke into AWS accounts belonging to multiple Qubole customers between October 14 and October 26 and stole stored secrets and data, cloud…
New Abe Office Malware Bypasses Chrome App-Bound Encryption to Steal Browser Passwords and Cookies
A new remote-access trojan called Abe Office can steal browser passwords and cookies, even from Chrome’s App-Bound Encryption. It poses as an office…
MS&AD Data Breach Tops 1 Million Records as Japan Insurers Report New Leaks
MS&AD Insurance Group reports more than 1 million exposed records after new breaches involving Mitsui Sumitomo Insurance and a third-party provider.
Hackers Compromise Ethersphere’s bee-js and Swarm Desktop to Deliver Wallet-Stealing Malware
Attackers used the Ethersphere project’s own release automation to publish malicious versions of two of its tools for the Swarm decentralized storage…