Ruby 4.0 Marshal.load RCE Gadget Chain Exposes Critical Deserialization Risk
A newly disclosed universal deserialization gadget chain shows how a single unsafe Marshal.load operation can reportedly produce remote command execution in ...
general
20 articles
Download More RAM Attack Bypasses Windows VBS, HVCI and Disables Microsoft Defender
A newly disclosed Windows attack technique, dubbed “Download More RAM,” can undermine Virtualization-Based Security (VBS), bypass Hypervisor-Protected Code I...
Apple macOS Screen Sharing Flaw Exploited on Internet-Exposed Macs to Install Monero Miner
A recently patched security flaw in Apple macOS has come under active exploitation in the wild to deploy a cryptocurrency miner, the Netherlands National Cyb...
Microsoft Copilot App Overhaul Merges Personal Chats and Ends Podcasts, Deep Research
Microsoft is reshaping its consumer and productivity AI strategy with a major update to its Copilot application, merging personal chat histories and generate...
GeoServer Zero-Day Is Already Being Probed. That’s the Problem
GeoServer faces an unpatched zero-day enabling SQL injection and potentially RCE, with attackers already probing exposed systems. A newly disclosed GeoServer...
MacOS AmnesiaStealer malware spread through ClickFix, grants live browser control
A fake GitHub download page hosts the malicious ClickFix command.
How Anthropic plans to watermark Claude's AI-generated text
It could soon become easier to identify AI-generated content, even if it's not the usual "It's Not X, it's Y" type of post you'd come across on LinkedIn and ...
Ready for the flood: How exposure management prepares you for the Mythos vulnerability onslaught
How proactive prioritization will save time and effort when your team faces a wave of AI-discovered vulnerabilities.
Trezor confirms shipping partner data breach affecting over 13,000 customers
While the breach was initially believed to affect only recent orders, new information suggests older orders may also be compromised.
U.S. judiciary to publicly disclose use of hacking tools in wiretaps starting 2029
Starting with the 2028 Wiretap Report, which will be published in 2029, the judiciary will include data on network investigating techniques.
California launches AI cybersecurity initiative amid growing threats
The initiative mandates the creation of an AI cybersecurity officer role within every state agency and establishes an AI cyber defense program housed in the ...
Cybercriminals invest millions in expired domains for illicit activities
These "dropcatch" domains are attractive to threat actors because they retain trust, backlinks, and web traffic from their previous legitimate use, making th...
MacOS screen sharing vulnerability actively exploited for crypto mining
The vulnerability, identified as CVE-2026-65400, has a severity rating of 7.1 out of 10 and stems from a flaw in macOS' screen sharing capability.
ExfilSquad data extortion group linked to 13 victim data leaks
ExfilSquad, which emerged on July 26, initially claimed to have exfiltrated data from 15 organizations.
ShinyHunters group claims responsibility for RingCentral data breach
The incident, which occurred in July, was disclosed by RingCentral as the result of a sophisticated social engineering campaign.
Friday Squid Blogging: Searching for the Colossal Squid
Fascinating video about searching for life undersea. The video basically makes the point that our bright white searchlights are scaring everything away, and ...
Mathematicians, Lazarus, Akira, Computer History, Zoom, LiteLLM, Josh Marpet and More - SWN #607
Investigation of banking hack leads to arrests in Germany, Brazil
Germany’s federal police agency, the BKA, said three suspects were picked up in Europe and charged with fraud, and Brazil’s federal police said four others w...
AI-driven energy buildout raises cybersecurity, supply chain risks
AI-driven energy growth brings new cyber and supply chain risks to critical infrastructure.
White House looks to engage private sector in offensive hacking ops
Trump expands private-sector role in U.S.