Attacks Abuse Windows Phone Link to Steal Texts & Bypass 2FA
In hard-to-detect attacks, hackers are dropping the CloudZ RAT and a fresh plug-in, Pheno, to hijack the Windows-based bridge between PCs and smartphones.
Security & Lifecycle News
Aggregated from vendor advisories, security research, and industry publications.
Rowhammer Attack Against NVIDIA Chips
A new rowhammer attack gives complete control of NVIDIA CPUs. On Thursday, two research teams, working independently of each other, demonstrated attacks against two cards from Nvid…
CISA Launches ‘CI Fortify’ to Prepare Critical Infrastructure for Geopolitical Cyber Conflict
Agency issued guidance and calls on operators to build resilient OT environments capable of surviving extended isolation and cyber compromise. The post CISA Launches ‘CI Fortify’ t…
GNOME may rule Ubuntu Resolute Raccoon, but X.org isn't roadkill yet
Seven official flavors offer alternatives to the default Wayland-only desktop – and Xfce looks like the leanest
Sophisticated Quasar Linux RAT Targets Software Developers
The persistent, evasive implant provides remote access, surveillance, and credential exfiltration capabilities. The post Sophisticated Quasar Linux RAT Targets Software Developers …
Palo Alto Networks warns of firewall RCE zero-day exploited in attacks
Palo Alto Networks warned customers today that a critical-severity unpatched vulnerability in the PAN-OS User-ID Authentication Portal is being exploited in attacks. [...]
Britain says Skyhammer drone interceptor passed Jordan tests with flying colors
MoD eyes Middle East exports after desert trials of Cambridge Aerospace system
Google's Android Apps Get Public Verification to Stop Supply Chain Attacks
Google has announced expanded Binary Transparency for Android as a way to safeguard the ecosystem from supply chain attacks. "This new public ledger ensures the Google apps on your…
Windows Phone Link Exploited by CloudZ RAT to Steal Credentials and OTPs
Cybersecurity researchers have disclosed details of an intrusion that involved the use of a CloudZ remote access tool (RAT) and a previous undocumented plugin dubbed Pheno with the…
Government, Scientific Entities Hit via Daemon Tools Supply Chain Attack
While trojanized Daemon Tools versions were installed worldwide, a sophisticated backdoor was dropped only on a dozen systems. The post Government, Scientific Entities Hit via Daem…
Planning and land searches hit by IT problems in 3 councils following SaaS migration
EXCLUSIVE: Searches go missing, house sales fall through, and a 5G mast erected by mistake
Oracle Debuts Monthly Critical Security Patch Updates
Containing fixes for critical-severity vulnerabilities, the monthly rollouts will focus on addressing priority issues faster. The post Oracle Debuts Monthly Critical Security Patch…
Palo Alto PAN-OS Flaw Under Active Exploitation Enables Remote Code Execution
Palo Alto Networks has released an advisory warning that a critical buffer overflow vulnerability in its PAN-OS software has been exploited in the wild. The vulnerability, tracked …
Middle East Cyber Battle Field Broadens — Especially in UAE
As the war with Iran continues, breach attempts targeting the United Arab Emirates tripled in a few weeks — many targeting critical infrastructure.
AWS lets agents drive its virtual cloudy desktops – which could cost 500,000 tokens per click
Vendor benchmark finds APIs let you do the job faster and cheaper
AWS lets agents drive its virtual cloudy desktops - which could cost 500,00 tokens per click
Vendor benchmark finds APIs let you do the job faster and cheaper Amazon Web Services has let AI agents loose in its cloudy WorkSpaces virtual PCs.…
Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls
CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls. The post Palo Alto Networks to Patch Zero-Day Exploited to Hack Firewalls appeare…
India orders infosec red alert in case Mythos sparks crime spree
Securities regulator urges market players to develop new strategies and nail cyber-basics before AI models fuel mass attacks
India orders infosec red alert in case Mythos sparks crime spree
Securities regulator urges market players to develop new strategies and nail cyber-basics before AI models fuel mass attacks India’s Securities and Exchange Board has advised parti…
Anthropic comes for the midmarket software spend
Backed by private equity and banking giants, it will build custom AI systems for business bottlenecks
Anthropic comes for the midmarket software spend
Backed by private equity and banking giants, it will build custom AI systems for business bottlenecks There’s gold in midmarket IT spend, and Anthropic - backed by private equity a…
New stealthy Quasar Linux malware targets software developers
A previously undocumented Linux implant named Quasar Linux (QLNX) is targeting developers' systems with a mix of rootkit, backdoor, and credential-stealing capabilities. [...]
Instructure hacker claims data theft from 8,800 schools, universities
The hacker behind a breach at education technology giant Instructure claims to have stolen 280 million data records for students and staff from 8,809 colleges, school districts, an…
Extreme moves toward autonomous networking with advanced AI agent, management tools
Extreme Networks is adding new AI agent software to its product portfolio, making significant upgrades to its Platform ONE management package, and extending its Wi-Fi 7 portfolio. …
OpenAI exec says company hopes to burn $50B of somebody else's money on compute this year
If the numbers are large enough, perhaps we won't question the math
OpenAI exec says company hopes to burn $50B of somebody else's money on compute this year
If the numbers are large enough, perhaps we won't question the math An executive for ChatGPT maker OpenAI said in court testimony on Tuesday that the AI model developer expects to …
Trellix Source Code Breach Highlights Growing Supply Chain Threats
Info is scant, but such breaches can reveal where a security product's controls are located and how detections are designed, giving attackers a leg up.
Viva la revolución: LinkedIn profile visitor lists belong to the people, says Noyb
GDPR Article 15 doesn't care if you want to make money by selling users' data back to them A LinkedIn feature the average non-paying user likely only glances past could end up sett…
Viva la revolución: LinkedIn profile visitor lists belong to the people, says Noyb
GDPR Article 15 doesn't care if you want to make money by selling users' data back to them