Chinese state-linked hackers exploit Chrome vulnerability
The BlueMoon exploit kit targeted U.S.
general
20 articles
New WeWorm tool hacks Android and iOS phones via WeChat calls
The WeWorm tool exploits a zero-click remote code execution vulnerability in WeChat's voice-over-IP stack.
Smashing Security podcast #484: How websites are tracking you with silence
When a chap called Matt noticed his Bluetooth headphones wouldn't switch to his phone, he was surprised to realise the reason was a single AliExpress webpage...
OpenSSL’s new alpha build speeds up post-quantum crypto
The OpenSSL project released the first alpha of OpenSSL 4.1.
Cisco confirms CVE-2026-20079 Secure FMC flaw exploited in attacks
Cisco has confirmed that a maximum-severity authentication bypass vulnerability tracked as CVE-2026-20079 in its Secure Firewall Management Center (FMC) soft...
AdaptHealth confirms 4.1 million people exposed in July cyberattack
Healthcare company AdaptHealth has confirmed that data of 4.1 million people was exposed in a cyberattack discovered in July that was attributed to the Shiny...
CISA head says agency must change quickly to prevent the 'worst that could happen'
CISA's cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the be...
Chinese espionage groups swarm to exploit triple-link chain of zero-days
Multiple China-aligned threat groups exploited the defects quickly to target various organizations. Proofpoint said the activity is ongoing and expects it to...
Skullcandy Dime 3 earbuds expose users to Bluetooth hijacking
The Carnegie Mellon University CERT Coordination Center (CERT/CC) is warning that Skullcandy Dime 3 wireless earbuds accept Bluetooth pairing requests from n...
Security at the moment of action: Applying access gateway for AI agents
AI-agent security doesn't end with authentication. Instead, that's only the beginning.
US disrupts Xinbi Guarantee marketplace fueling the cyber scam economy
The U.S.
F5 BIG-IP malware hides web shells in memory to evade detection
Memory-resident malware targeting F5 BIG-IP appliances can evade file-based security defenses.
FTC rescinds policy requiring health apps to notify customers after a breach
The policy, passed under the Biden administration, forced health apps to disclose when users’ personal health records were exposed in a breach or shared with...
Lawmakers call on Treasury to sanction hackers-for-hire
The groups have allegedly targeted American citizens and companies, including the wife of GOP Senate candidate Mike Rogers, a former representative running i...
U.S. Disrupts Xinbi Guarantee Scam Marketplace, Freezes $52.8 Million in Crypto
The U.S.
US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models
US agencies accuse six Chinese AI firms of extracting billions of tokens from US AI models to accelerate development and copy advanced capabilities. NSA, CIS...
Grindr settles privacy lawsuit tied to disclosure of users’ HIV statuses for $35 million
The settlement concludes a legal fight that dates to April 2024, when UK users sued for the alleged violations of their country’s privacy laws.
What Microsoft’s largest security update means to security teams
September 2026 Patch Tuesday set a record and teams must now shift to risk-based prioritization versus simply finding bugs.
HelmGuard Raises $7.3 Million for Agentic GRC and Security
The company will increase its US market presence and will expand its engineering and go-to-market teams. The post HelmGuard Raises $7.
Electronic health record company says customer data stolen in breach
Veradigm said access was limited to a specific interface, and did not impact the company’s broader environment such as its networks, servers or databases. Th...