Aggregated from vendor advisories, security research, and industry publications.
The North Korea-aligned state-sponsored hacking group known as ScarCruft has compromised a video game platform in a supply chain espionage attack, trojanizing its components with a backdoor called BirdCallto likely target ethnic Koreans residing in China. While prior versions of the backdoor have primarily targeted Windows users only, the supply chain attack is assessed to have enabled the
The North Korean hacker group APT37 has been delivering an Android version of a backdoor called BirdCall in a supply-chain attack through a video game platform. [...]
The vulnerabilities were reported to Meta through its bug bounty program and were patched with updates released earlier this year. The post WhatsApp Discloses File Spoofing, Arbitr…
If you can't bother to keep GitHub running, why should we bother with you? Opinion It's been another shabby week for Microsoft, and a shabbier one for its users. We learnt that Win…
If you can't bother to keep GitHub running, why should we bother with you?
A critical security vulnerability in Weaver (Fanwei) E-cology, an enterprise office automation (OA) and collaboration platform, has come under active exploitation in the wild. The …
Microsoft has disclosed details of a large-scale credential theft campaign that has leveraged a combination of code of conduct-themed lures and legitimate email services to direct …
New monsters! New magic items! An Arm port! And compliance with a dead C standard Antiques Code Show Admirers of Roguelike games have a new distraction: Version 5.0 of NetHack drop…
New monsters! New magic items! An Arm port! And compliance with a dead C standard
Haswell’s had its day and Skylake and Cascade Lake are draining away Microsoft will stop offering long-term rentals for 17 Azure instance types – most of them powered by CPUs Intel…
Haswell’s had its day and Skylake and Cascade Lake are draining away
At its Think conference on Monday night, IBM announced what it calls a new operating model for the agentic enterprise. It encompasses coordinated AI agents that execute across t…
Article URL: https://www.dragonsreach.it/2026/05/04/cve-2026-31431-copy-fail-rootless-containers/ Comments URL: https://news.ycombinator.com/item?id=48017813 Points: 205 # Comments…
Belden (NYSE: BDC) has agreed to acquire Ruckus Networks from Vistance Networks (NASDAQ: VISN) for $1.846 billion in cash. It is the latest ownership change for a Wi-Fi and enterpr…
Vendors all use different formats. This tech translates them all so you can smooth your SOC Academics from Singapore and China have found a way to make AI useful for cyber-defender…
Vendors all use different formats. This tech translates them all so you can smooth your SOC
The Iran war has been great for business The Iran War has been great for business at Palantir, as the Department of Defense has doubled usage of the company’s Maven targeting syste…
Hackers have been exploiting a critical vulnerability (CVE-2026-22679) in the Weaver E-cology office automation since mid-March to run discovery commands. [...]
The tiny desktop is no longer Apple's most affordable computer The Mac Mini is the latest victim of the AI-fueled RAM-pocalypse. Last week, Apple discontinued the 256 GB version of…
The tiny desktop is no longer Apple's most affordable computer
Cargo theft is no longer about small groups of criminals operating on the ground, but transnational cybercriminal syndicates using access to supply chain systems to reroute goods.
Devs not thrilled that Git extension added the bot as co-author by default Imagine working your butt off on a project, only to have VS Code put an attribution into your commit that…
Devs not thrilled that Git extension added the bot as co-author by default
The first major fruits of the x86 Ecosystem Advisory Group (EAG) have come in the form of ACE, a new set of matrix instructions from Intel and AMD that the two claim deliver a mass…
Attackers are abusing two remote monitoring and management (RMM) tools to evade detection in a campaign that has impacted over 80 organizations so far.
46% say age checks are easy to bypass, and nearly a third admit getting around them It’s been months since the UK government began requiring stronger age checks under the Online Sa…
46% say age checks are easy to bypass, and nearly a third admit getting around them
The Amazon Simple Email Service (SES) is being increasingly abused, a cybersecurity company's telemetry data shows, to send convincing phishing emails that can bypass standard secu…
Cybersecurity firm Kaspersky reports that the Amazon Simple Email Service (SES) is being increasingly abused to send convincing phishing emails that can bypass standard security fi…
Cisco announced plans to acquire Astrix Security for an undisclosed amount to bolster its AI agent security portfolio. Astrix is known for its security platform that specializes in…