A Linux rootkit targeting devices in F5 BIG-IP APM environments can intercept PHP file loading and inject a fileless web shell directly into memory, avoiding the need to write malicious code to disk. [...]
OpenVPN security advisory (AV26-889)
Researchers got inside the crooks' admin panel and found 5,137 stolen records tied to 461 organizations
Multiple vulnerabilities have been discovered in Adobe products, the most severe of which could allow for arbitrary code execution.Adobe Experience Manager (AEM) is an enterprise-grade digital...
Image: UK Govt. What’s new: The United Kingdom has published its Space Strategy which also includes significant info on its national resilient PNT plans. Why it’s important: The UK is leading the...
Research confirms email summary design flaws — and that any unverified content is an attack vector, so invest in threat intel.
Iran state media on Monday said a ballistic missile with improved capabilities was demonstrating a new doctrine: Tehran “will take action against any threat, even before it is carried out.” The...
Microsoft has released the Windows 10 KB5122878 extended security update, which includes this month's record-breaking September 2026 Patch Tuesday fixes, along with a few bug fixes. [...]
The Chinese Communist Party has spent years trying to make “positive energy” the dominant mood of the country’s internet. Online platforms, it dictates, should amplify narratives of economic...
Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The...
When AI plays both sides of the field, the advantage goes to whoever can act first
The UK’s National Cyber Security Centre (NCSC) has warned that employees using unapproved AI tools can expose corporate data and create security risks that organizations may struggle to detect and...
An Advance Passenger Information System (APIS) database holding more than 220 million passenger and crew records, including passport numbers and flight details, was accessible online through a...
Adobe security advisory (AV26-888)
German authorities are investigating another trove of data stolen from Berlin’s government network after hackers published login credentials and other information over the weekend. The latest...
Today is Microsoft's September 2026 Patch Tuesday, with security updates released for a record-breaking 966 flaws, including two actively exploited zero-day vulnerabilities. [...]
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams. The campaign,...
SonicWall security advisory (AV26-884)
N-able security advisory (AV26-885)
Dell security advisory (AV26-886)
Mikrotik security advisory (AV26-887)
Days after the United States launched Operation Epic Fury, Chairman of the Joint Chiefs of Staff General Dan Caine described how U.S. Cyber Command had been “layering” cyber effects with space and...
104Critical860Important0Moderate0LowMicrosoft addresses 964 CVEs, smashing July’s release as the largest Patch Tuesday release. This month’s updates include patches for two zero-days that were...
When Americans think about cyberattacks on critical infrastructure, they often picture pipelines, banks or the electric grid. But one of the most attractive targets for foreign adversaries flows...
Security audits weren’t enough to keep many cryptocurrency platforms safe from money-losing hacks, crypto market data site CoinGecko said in a report dated Aug. 27. Between January 2025 and July...
Two populous states and two large cities are among the U.S. jurisdictions where leaders have taken direct action to address criticisms of automated license plate readers (ALPRs).
NATO airspace in Europe is now an active front line. Almost every week this summer brought new reports of drone incursions over the alliance’s eastern frontier and North Atlantic Treaty...
Written by: Aurora Blum, Kelli Vanderlee, Jess Xia, David Mainor, Kimberly Goody Executive Summary Since the release of our May 2026 report detailing adversarial misuse of artificial intelligence...
Companies 'don't want their IP exposed, so they're willing to pay'
Microsoft has released Windows 11 KB5124008 and KB5122880 cumulative updates for versions 25H2/24H2 and 23H2 to fix security vulnerabilities, bugs, and add new features. [...]