Critical Gitea flaw allows authentication bypass via single HTTP header
The vulnerability stems from an insecure default configuration in Gitea's official Docker images (versions prior to 1.26.
SC Media
20 articles
Keyfactor secures over $1 billion in funding to expand encryption management
Keyfactor's platform, AgileSec, helps organizations manage and secure their encryption keys and other cryptographic assets like digital certificates.
Radware enhances AI agent security with compliance reporting and endpoint protection
Radware's update provides improved monitoring and mapping of agent interactions and dependencies, allowing security teams to understand how autonomous system...
Accenture confirms security incident after hacker claims source code theft
A threat actor, identified as "888," posted on a cybercrime forum offering the data for sale, alleging it was stolen in July.
WireVPN linked to long-running operation using victims' devices as proxy network
Infoblox researchers uncovered the operation after analyzing a malicious 7-Zip installer. They found over 230 related domains linked through various infrastr...
Tenda routers have unpatched backdoor vulnerability, CERT/CC warns
The vulnerability, tracked as CVE-2026-11405, resides in the login function of the router's web server binary.
New cyber-physical attack manipulates data center power consumption
Researchers at Zhejiang University have developed Bit2Watt, a proof-of-concept attack that abuses rented GPUs by running specialized workloads designed to ra...
FCC bans US IT firm Digitalsystem alleged China links
Digitalsystem Technology, headquartered in Los Angeles, was added to the FCC's Covered List for its partnerships with Hong Kong operators China Mobile and Ch...
New GoodPersonRAT malware distributed via fake LetsVPN installer
The trojanized installer, identified as Kuailian_win-setup.86.
8 victims sue spyware firm Intellexa over Predatorgate scandal
The plaintiffs, including journalist Thanasis Koukakis, lawyers, and intelligence officials, are each seeking €1 million in moral damages.
AI Is Annoying & IoT Devices Still Get Hacked - PSW #934
Two-year online college ‘Campus’ now offers cybersecurity track
Online program aims to build a pipeline of qualified candidates to fill positions that require much-needed AI skills.
How the ‘token economy’ has become a security and financial minefield
Here’s why teams have to treat token management with the same urgency as network telemetry.
Rethinking Email Security in the AI Era How Modern Phishing Bypasses Traditional SEGs - WC #1
Armored Likho APT leverages AI-generated malware and BusySnake Stealer
Armored Likho utilizes a modular and evolving toolkit that includes obfuscated remote access trojans (RATs), the Python-based BusySnake Stealer, and Go2Tunne...
Class-action lawsuit against X.ai's Grok tool expands with new plaintiffs alleging CSAM creation
The lawsuit, initially filed by three women, now includes two additional anonymous plaintiffs, Jane Does 4 and 5.
BeyondTrust warns of critical flaws in remote access software
The vulnerabilities, tracked as CVE-2026-40138 and CVE-2026-40139, affect specific versions of BeyondTrust's RS and PRA software.
UK government launches Cyber Resilience Pledge with M&S and Capita signing up
Marks & Spencer has become one of the first companies to sign up to the UK government's new Cyber Resilience Pledge, following a year where the retailer ...
Suspected Chinese spies target universities with Roundcube exploit
Hackers selling UK government login credentials on dark web amid FortiBleed campaign
The FortiBleed campaign targets internet-facing Fortinet VPNs and firewalls, with over 70,000 devices in 194 countries believed to be affected.