-
Attackers are compromising camera management software to gain remote access, run malicious DLLs through a legitimate Windows component, and maintain persistent footholds in enterprise environments. The incidents show how overlooked surveillance applica…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical vulnerability in EDK II’s PXE network boot driver could allow unauthenticated attackers to execute malicious code before the operating system loads. This vulnerability, tracked as CVE-2026-97631, affects ICMP error processing during bo…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Discord will make eligible messages from public channels in Discoverable Servers accessible through Google and other search engines, expanding conversations beyond its application. This rollout introduces privacy considerations, messages from members a…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Threat actors targeting Japanese organizations are using artificial intelligence to automate intrusion workflows, speed up attack planning, and develop credential-theft tools, according to an investigation of three exposed attack infrastructures. The f…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers targeted the U.S. Federal Election Commission’s systems, forcing the agency to shut down online services and disrupting campaign finance filings just days before the November 3 midterm elections. The outage delayed fresh spending disclosures, b…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A critical flaw in the GoAhead embedded web server lets revoked client certificates pass authentication checks, potentially restoring access to identities administrators have blocked. Tracked as CVE-2026-115881, the vulnerability carries a CVSS score o…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers have abused Indian government and educational domains to promote illegal gambling websites through Google Search, using unauthorized DNS changes to establish malicious subdomains while leaving legitimate websites operational. Another delegated …
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The Cybersecurity and Infrastructure Security Agency (CISA) offers two free assessment tools, ScubaGear and ScubaGoggles, to help organizations identify insecure configurations in Microsoft 365 and Google Workspace. Developed under the Secure Cloud Bus…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Advertising infrastructure is increasingly being repurposed as a surveillance channel that can profile internet users and track their movements across sensitive locations, according to research from TrendAI. Investigators identified an operation, refer…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Research has identified 42 weaponized GitHub repositories belonging to 11 legitimate owners in the testmetest npm campaign, exposing an operation that combines credential theft, development-tool execution hooks, and malicious package publishing. The fi…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
