Senate bill aims to prepare U.S. electric grid for quantum computing threats
The Quantum-GUARD Act directs the Federal Energy Regulatory Commission (FERC) to consider quantum computing threats when reviewing reliability standards for ...
general
20 articles
WordPress plugin vulnerabilities allow admin account takeover
The vulnerabilities, tracked as CVE-2026-61979 and CVE-2026-15981, can be chained together to bypass authentication.
Metal Gear Online 3 vulnerability allowed remote code execution
The vulnerability, discovered by researcher Alice Cecchetto and detailed by CERT/CC, stemmed from a heap-based buffer overflow in the game's player-removal m...
TikTok agrees to $400 million settlement over child privacy
The settlement addresses claims that TikTok illegally collected data from users under 13 and knowingly allowed them to create accounts, violating the Childre...
Developer alleges Alibaba uses audio fingerprinting for web tracking
Software engineer Matt Callaghan discovered that Alibaba's website employed obfuscated audio scripts that generated a waveform and analyzed its output.
How to catch what background checks aren’t built to see
Too often today the hiring funnel becomes the attack surface – here’s how to catch insider threats before they escalate.
Microsoft says Entra ID identity software not exploited, revises CVE
While the urgency has changed, security pros say teams should still review Entra ID logs for anything suspicious before the patch.
Unpatched Calix flaw lets hackers bypass NAT to expose internal devices
An unpatched vulnerability in Calix GS7 XGS (GS5239XG) residential routers used by multiple U.S.
CISA adds Zimbra Collaboration Suite bug to exploited vulnerabilities list
Experts warn that it’s the fifth time Zimbra made the KEV this year.
New Zealand to pursue social media ban for children under 16
The legislation would mandate that high-risk social media platforms such as Instagram, TikTok, Snapchat and Facebook take “reasonable steps” to ensure users ...
Hackers target WordPress sites in miniOrange auth bypass attacks
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress that can ...
Treasury sanctions alleged Iranian hackers as part of ‘economic D-Day’
It’s a follow-up to an indictment the Justice Department unsealed last week against people affiliated with the Mabna Institute. The post Treasury sanctions a...
Bipartisan Senate bill aims to prepare energy sector for Q-Day
Under the bill, FERC would consider cyber threats from quantum computers and post-quantum cryptography in its reliability standards for the energy sector. Th...
CMMC Phase 2 suspended: What defense contractors need to know
CMMC Phase 2 is paused, but defense contractors must keep meeting existing cybersecurity requirements.
Indian national who fled US arrested for allegedly helping scammers siphon $7.5 million from elderly New Yorkers
A Jersey City resident is facing charges for his alleged role as a money mule for overseas cyberscammers who stole millions from elderly New Yorkers.
TikTok reaches $400M settlement with US over COPPA violations
The U.S.
Weedhack Malware Spreads via Fake Minecraft Clients and SEO Poisoning
Cybersecurity researchers have found that several websites are still actively distributing a malware family known as Weedhack to gamers by masquerading as Mi...
ReliaQuest Confirms ShinyHunters Hack, but Says Impact Was Limited
A ReliaQuest employee fell victim to a phishing attack and the hackers gained access to a dashboard. The post ReliaQuest Confirms ShinyHunters Hack, but Says...
Cybercriminals Turn GTA VI Leaks Into Malware Bait
A fake 113GB GTA VI build is packed with malware, using massive empty files to hide a tiny malicious payload. GTA VI hype has reached the point where people ...
New Guidance Helps Businesses Verify Quantum-Safe Hardware Claims
TCG has released new guidance to help proving that trusted platform modules genuinely meet essential quantum-safe requirements