Open with CtrlK — press Esc to close
CrowdStrike's Counter Adversary Operations team, working with U.S. and European law enforcement, disrupted the Sality botnet on Aug. 31, 2026, cutting off the machines it had infected from the…
Socket, an application-security company, said on Aug. 27 it had identified 19 malicious browser extensions, 18 in the Chrome Web Store and one in the Microsoft Edge Add-ons store, that drain…
The Qubes OS project has disclosed a flaw in its own file-copy tool that it says can hand an attacker control of an entire machine, and has shipped a patch for it. Qubes Security Bulletin 118 is…
The security firm VulnCheck said on Aug. 27 that it had found two more implants built into the shipped firmware of routers made by Shenzhen Zhibotong Electronics, or ZBT, and that its own internet…
When you sign in with a passkey, the clever part happens where you can see it: a fingerprint, a face, a phone that lights up. The part that decides whether any of it means anything happens somewhere…
PaperCut released an emergency patch for its PaperCut NG and PaperCut MF print management servers early on Aug. 28, hours after the company said it was investigating active exploitation of a…
The Justice Department and the FBI have seized internet domains used to run two hacking platforms, QScan and QTRouter, and the court-authorized seizures left both inoperable, the department announced…
A distributed denial-of-service attack that began at 3:38 a.m. on Monday, Aug. 24, disrupted twelve shared digital services run by the Norwegian Digitalisation Agency, the agency said in a statement…
A three-day deadline for U.S. federal civilian agencies to fix a flaw in Zimbra's email and collaboration software fell due on Aug. 24. The Cybersecurity and Infrastructure Security Agency added the…
The mobile security firm Zimperium published an analysis on Aug. 19 of a new build of ToxicPanda, an Android banking trojan the company says had previously concentrated on Europe. Zimperium says the…
Cisco Talos said in a report published Aug. 20 that a criminal group it tracks as UAT-10147 has been using AI tools as part of its break-ins of internet-facing web servers. Talos says it found the…
Five U.S. federal agencies issued a joint advisory Aug. 19 saying that attackers are using scripts written with the help of AI to find and probe Siemens S7 programmable logic controllers, the small…