Aggregated from vendor advisories, security research, and industry publications.
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 malware known as PEERSTITCH. The attack involves the exploitation of CVE-2025-61624 (CVSS score: 5.4), a path traversal flaw in the command line interpreter of FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager that could allow a
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...]
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
Built from decades of threat intelligence research, the new resource explains scams from the victims' perspective and tracks emerging forms of cyber crime.
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Aaron Ardiri opened his old development archive after discovering enthusiasts were still improving apps for the platform
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumentscode) for Nextcloud…
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the host computer it runs on. A researcher demonstrated the leak against …
Most attempts were pranks, but some could fool unwary AI agents
Google announced new AI-powered defenses against scam messages and call-forwarding abuse on Android, currently rolling out to eligible devices. [...]
They tried to sound the alarm in August
IPv6-mostly is a foothold to get from your dual-stack network to a much more predominantly IPv6-run network, but the reality is that IPv6-mostly has a whole set of dependencies abo…
Microsoft's Go rewrite gets some competition, with a developer claiming his port runs twice as fast
Someone built a tool to steal data, then decided it should scare the victim for fun. Yes, that’s an actual feature. And somehow, it fits right in with this week's security stories.…
Ethan and Holly are back to walk us through Access Lists. Access Lists regularly appear in networking device configurations and aren’t just for security. Ethan and Holly break down…
A proxyjacking campaign has impacted devices in 34 countries, monetizing victims' internet connections through a commercial residential proxy network. [...]
Contextual defense helps security teams connect the signals, anticipate what comes next, and stop threats before they escalate. The post Context Is King in the Fight Against Modern…
Not afraid of custom waveforms frying your e-paper? Download it from GitHub and give it a shot on your stock screen today
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
AI's appetite for components hammers budget handsets, with analysts seeing little relief before 2028
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms: Abstract: We estimate how much …
CEO eyes usage-based billing as automation pushes HR software vendor beyond traditional IT spending
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other acti…
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS). The act…
For those times when a full-fat editor is overkill
Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.
Wayland-only Plasma 6.8 heads for Kubuntu 'Tenacious T-Rex' early next year
PARTNER CONTENT: A million reasons why advanced computing matters for genomics
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval