N-able addresses critical N-central vulnerabilities exploited by attackers
Attackers leveraged an authentication bypass vulnerability, identified as CVE-2026-18556 and later expanded by CVE-2026-18577, to achieve remote administrati...
general
20 articles
Google Chrome to block malicious policy-installed extensions
This new protection, currently in development and planned to be enabled by default, aims to combat malware abuse of Chrome's enterprise policy features on un...
Fake Roblox Xeno script launcher pushes infostealer, RAT malware
Fake Xeno Executor installers are infecting unsuspecting Roblox players with malware that provides remote access and steals sensitive information. [.
Defcon badges feature new open-source chip for enhanced security
The Baochip-1x is a "mostly" open-source microcontroller that allows for verifiable security.
Critical vulnerability in Rails Active Storage could lead to RCE
The vulnerability specifically affects Active Storage versions prior to 7.2.
INC Ransomware chains two SonicWall SMA 1000 zero-days in attacks
INC ransomware exploits SonicWall zero-days, prompting compromise fears.
Coldcard hardware wallet firmware flaw led to $70 million Bitcoin theft
The vulnerability, identified by Block and detailed by Galaxy Research, occurred because a deterministic software pseudorandom number generator (PRNG) was us...
18 Malicious npm Packages Deliver Cross-Platform RAT to Alibaba Tool Users
Cybersecurity researchers have discovered a new set of malicious npm packages that target users of Alibaba developer tools with a cross-platform remote acces...
COLDCARD Seed Generation Flaw Linked to Nearly $89 Million Bitcoin Theft
Galaxy Research linked a suspected Bitcoin theft of 1,367.05 BTC to weak COLDCARD seeds.
Hackers steal 31,000 records identifying people behind Liechtenstein companies, foundations
A cyberattack compromised tens of thousands of records related to companies, foundations and trusts in Liechtenstein, prompting the government to to form a “...
Adobe fixes critical vulnerabilities in Campaign Classic and Bridge
The critical vulnerability in Adobe Campaign Classic, identified as CVE-2026-48449, stems from incorrect authorization and poses a significant risk for remot...
More on the OpenAI Agent’s Attack on Hugging Face
Hugging Face has published a detailed timeline of the attack. From the summary: The agent was running an internal OpenAI cyber-capability evaluation based on...
N-able warns of N-central auth bypass flaw exploited in attacks
N-able is warning customers that hackers are exploiting an authentication bypass vulnerability (CVE-2026-18577) affecting both hosted and on-premises N-centr...
Empty web pages are a security risk, Kaspersky warns
These seemingly harmless blank pages or "Coming Soon" placeholders can silently collect a visitor's IP address, approximate location, User-Agent string, and ...
Google Password Manager Attacks Could Let Malware Hijack Passkey-Protected Accounts
Malware running as an ordinary user on a Windows machine can sign into a victim's passkey-protected accounts without a fingerprint, a PIN, or anything at all...
South Korea warns of nation-state actors using phishing and compromised websites
The phishing attacks involve disguised job applicants sending resumes with malicious links or impersonating recruiters with password-protected ZIP files cont...
INC Ransomware Emerges as Dominant Actor Exploiting SonicWall SMA 1000 Flaws
The INC Ransomware operation has emerged as the "dominant threat actor" exploiting the recently disclosed security flaws in SonicWall Secure Mobile Access (S...
Adform supply-chain attack replaced crypto wallet addresses
The attack exploited Adform's JavaScript tracking script, "trackpoint-async.js," which is embedded in numerous websites.
Why AI agents need their own identity
Agents need their own identities, scoped to a specific task, and then must be destroyed.
Arch Linux temporarily disables AUR package adoption amid malicious takeover surge
The surge in malicious activity began around July 29, with initial reports identifying the "openconnect-sso" package as compromised.