Microsoft discloses two actively exploited zero-days among 974 vulnerabilities
While the vendor hit another monthly record, it hasn’t resulted in a flood of active exploits. Researchers encourage customers to focus on their specific are...
general
20 articles
Broadcom patches critical VMware Workstation and Fusion VM escape vulnerabilities
The first vulnerability, CVE-2026-59346, is a critical integer-overflow flaw within the VMXNET3 virtual network adapter.
Madagascar strengthens digital identity program with new cybercrime laws
The Malagasy government has submitted two cybercrime bills to parliament, aiming to modernize the national cybercrime framework and ratify the UN Convention ...
Microsoft posts nearly 1,000 bugs for Patch Tuesday as CISA warns two being exploited
The new record total for Patch Tuesday is 973 vulnerabilities.
Microsoft Plugs Nearly 1,000 Security Holes
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch...
Cybercabs, Robohobos, BigBear, Nightmare Eclipse, weChat, Flock, ASCII, Aaran Leyland - SWN #614
Scammer behind $245 million crypto heist pleads guilty to RICO charges
Malone Lam was indicted on scamming charges in September 2024 after drawing law enforcement scrutiny for parlaying stolen crypto into lavish Hamptons vacatio...
Feds accuse China of ‘systematic’ distillation of U.S. AI models
A joint advisory alleges Chinese companies are using sophisticated systems to route millions of data requests to US AI models across different accounts and p...
Hackers Drain $320 Million From Liquid Network, Then Return Most of It
Crypto exchange network Liquid Network lost $320 million overnight, then got most of it back after the hackers demanded a bug fix instead of a ransom Bitcoin...
DoppelCart fraud network uses 119,000 fake shops to steal credit cards
A massive operation dubbed "DoppelCart" uses more than 119,000 domains to run a network of fake e-shops that steal payment card details. [.
Identity Security Posture Management (ISPM): Visibility, Risk, and Remediation
Russian national extradited to US for alleged involvement in bank-account takeover scheme
Authorities accuse the 36-year-old and co-conspirators of collecting more than 5,000 victim login credentials to various banks. The post Russian national ext...
The EU CRA's Real Question: What Shipped, and When Did You Know?
The EU Cyber Resilience Act's vulnerability reporting requirements take effect September 11, giving software vendors as little as 24 hours to report actively...
Closing the accountability divide: How to prove what happened in a breach
It's not enough to contain an incident. You must also understand why and how it happened.
OAuth and OIDC: Token Flows, Scopes, and Common Attack Vectors
Hackers breach F5 BIG-IP APM devices to deploy Linux rootkit
A Linux rootkit targeting devices in F5 BIG-IP APM environments can intercept PHP file loading and inject a fileless web shell directly into memory, avoiding...
CIA’s Michael Ellis says cyber intelligence is changing how the agency operates
The deputy director cited Operation Absolute Resolve as evidence that cyber teams have become central to CIA missions. The post CIA’s Michael Ellis says cybe...
CIA official touts agency’s Cyber Mission Center in capture of Venezuela’s Maduro
A "flawless" performance by the CIA's Cyber Mission Center contributed to the capture of Venezuelan President Nicolás Maduro in January, agency Deputy Direct...
Russian suspect in bank account takeovers is extradited to US
A Russian web developer who played a role in a multimillion-dollar bank account takeover scheme has been extradited to the U.S.
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
The record-breaking September security update fixes two exploited privilege-escalation zero-days and 20 potentially wormable vulnerabilities. The post Micros...