Policy & Society

Climate change is the issue . As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered. Blog m

A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with

Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the

The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People's Republic of Korea (DPRK aka North Ko

Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hard

A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Tai

An international police operation took down servers behind Gootloader, CastleRAT and StealC this week. Criminals used the three malware tools to gain

The third post in the series "Reining In AI: From Weekend MVP to Multi-Channel Command Console." The previous post laid out the groundwork: v2's trust

An unknown threat actor has been observed targeting unpatched Check Point Security Gateways to obtain initial access via the PHP2Shell vulnerabilities

A new attack campaign is breaching Microsoft SQL Server systems exposed to the public internet through password guessing. Attackers use a dictionary c

N-able on Thursday said it's taking additional precautions in the wake of public disclosure of a new set of flaws tracked as 4EverAble2Shell and Agent

Core Microsoft 365 services including Outlook and Teams suffered a massive global outage in the early hours, with Downdetector logging close to 130,00

The US has frozen $2.7 billion in the Binance theft case and identified a North Korean hacker group. The US government froze $2.7 billion of cryptocur

A new Android remote access trojan named ArcticRAT can fully control a user's phone, while the owner sees only a black screen. The device appears to b

OpenAI has officially released Daybreak Red Team and Daybreak Defense Factory, two AI cybersecurity tools designed to help organizations of all kinds

TSMC has confirmed an employee data leak, with the source traced to a third-party cloud provider. The company verified that personal data of some curr

Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver.

Huang, who was ousted as CEO following reports of an alleged affair with a woman suspected of spying for China, agreed to testify Wednesday after seve

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository.

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could l

The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote a

Google Cloud VMs on AMD Turin chips need a guest OS patch and a stop-and-start to protect against three CPU side-channel flaws, Google said this week.

Penlink’s Webloc is an application that locates people using information from the weather, gaming, email, and religious apps on their phone. It’s sold

N-able on Thursday said it's investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central

Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to jud

PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in re

Germany's Federal Cartel Office said yesterday local time that, based on its preliminary assessment of PayPal's rules in the online retail payment mar

Samsung has reached a settlement in a patent infringement lawsuit over the Wireless PowerShare reverse wireless charging feature on its Galaxy phones,