Open with CtrlK — press Esc to close
Bitdefender Labs said Oct. 8, 2026, that it had found a hidden app shipping inside the factory software of low-cost Android phones from several brands, all built on MediaTek chips. The company says…
Lumen Technologies' Black Lotus Labs says it has blocked all traffic to and from the control servers of a cryptocurrency-mining network that has taken over thousands of internet-facing AI and…
The UK's National Cyber Security Centre published an alert on Oct. 6, 2026, telling anyone who shops with ASOS to assume they are affected by a cyber incident at the online retailer, even if nothing…
Ask a language model for something it is supposed to refuse, and the decision is usually made in the first breath of the answer. Either it opens with a refusal or it opens by complying, and the rest…
Google said attackers who took over three countries' domain registries obtained unauthorized HTTPS certificates for web addresses they did not own, including several of Google's own. In a post…
The Wikimedia Foundation said Oct. 5, 2026, that an investigation it ran on its own systems found unauthorized AI agent activity on its wikis, on a note-taking tool it hosts and across its data…
Atlassian published fixes on Oct. 5, 2026, for a flaw in eight of its self-hosted products that the company says lets an attacker with no account on the system read certain files off the server.…
Citrix published fixed builds on Oct. 3 for a vulnerability in its NetScaler ADC and NetScaler Gateway appliances, and a day later the US Cybersecurity and Infrastructure Security Agency added that…
Denmark's Ministry of Research, Education and Digitalisation said on Oct. 5, 2026, that unauthorized parties had obtained the names, addresses and CPR numbers of about 8.8 million people listed in…
ASUS published two security records for its routers on Oct. 1, 2026, and the fix for both is a firmware update. The company, which issues CVE identifiers for its own products, scored the more severe…
The Technical University of Denmark said on Oct. 2, 2026, that attackers compromised user profiles, used them to reach DTUBasen, the system that holds its user records and controls access to its…
A critical flaw in Rejetto HFS, open-source software for sharing files from a computer over the web, is now being exploited, according to VulnCheck, the company that assigned the flaw its identifier.…