Cybersecurity

Cybersecurity

BlackX Bootkit Exploits Baton Drop to Bypass Secure Boot

A UEFI bootkit called BlackX exploited the Baton Drop vulnerability to bypass Secure Boot protections during an espionage campaign discovered in early 2026, according to BleepingComputer, citing Kaspersky researchers. Th

menu_book2 min read visibility1 reads history1 week ago linkBleepingComputer share

Cybersecurity

Reports describe a covert Pentagon office for disrupting foreign technology

The Pentagon quietly established the Information on the Technology Support Office (TSO) in April by merging two classified intelligence programs that had been active since 2023, according to TechRadar, which cites report

menu_book2 min read visibility1 reads history1 week ago linkTechRadar share

Cybersecurity

Researchers disabled a Popcorn Time updater to prevent a botnet

Researchers at Eye Security disabled an abandoned Popcorn Time updater to reduce the risk that it could be used to create a botnet. The updater belonged to a fork called Time4Popcorn and was still…

menu_book1 min read visibility1 reads history1 week ago linkThe Verge share

Cybersecurity

Microsoft Teams to Add Context-Aware AI Phishing Detection in November

Microsoft plans to begin rolling out AI-powered phishing detection in Microsoft Teams in early November 2026. The feature will first reach users in a targeted release phase expected to end by mid-November. Microsoft expe

menu_book1 min read visibility1 reads history1 week ago linkBleepingComputer share

Cybersecurity

PHP2Shell flaws put NAS devices at risk as vendors prepare patches

The PHP2Shell vulnerability pair may affect network-attached storage (NAS) devices as well as websites and web apps, according to TechRadar, citing research by Apple Insider. Devices reachable from the public internet ma

menu_book1 min read visibility1 reads history1 week ago linkTechRadar share

Cybersecurity

PHP Shares Mitigation for Unpatched RCE Vulnerability

The PHP security team has shared a mitigation for a remote code execution (RCE) vulnerability that has no patch yet and affects systems with an unusual combination of configuration and application code. Tracked as…

menu_book1 min read visibility1 reads history1 week ago linkBleepingComputer share

Cybersecurity

Quest Diagnostics Confirms Patient Data Breach

Quest Diagnostics has confirmed a cyberattack that exposed some patient information stored in its systems. The company disclosed the incident in a filing with the U.S. Securities and Exchange Commission. The attack targe

menu_book1 min read visibility1 reads history1 week ago linkTechCrunch share

Cybersecurity

Capcom Confirms Data Breach Affecting 11.7 Million Accounts

Capcom confirmed that a third party accessed its CAPCOM ID service and obtained information linked to 11,774,247 user email addresses. The company said the breach triggered its security protocols and that the service has

menu_book1 min read visibility1 reads history1 week ago linkTechRadar share

Cybersecurity

HPE patches eight maximum-severity ArubaOS flaws

Hewlett Packard Enterprise (HPE) has released security updates for 72 vulnerabilities in Aruba Operating System (ArubaOS), including eight maximum-severity flaws that allow authentication bypass or remote code execution.

menu_book1 min read visibility1 reads history1 week ago linkBleepingComputer share

Cybersecurity

PHP Security Flaws Spur Urgent Fixes and Strain IT Teams

Two critical flaws in PHP, a programming language used by millions of websites, triggered an urgent security response and left IT teams scrambling to update systems. The PHP Foundation, which manages the language, releas

menu_book2 min read visibility1 reads history1 week ago linkBBC share