Cybersecurity

Cybersecurity

Open-source security faces an AI-driven surge in vulnerability reports

Open-source security teams are facing a rising volume of vulnerability reports, with artificial intelligence contributing to the problem and potentially helping to manage it, according to a TechRadar report. Speaking at

menu_book2 min read visibility1 reads history3 weeks ago linkTechRadar share

Cybersecurity

Why Identity Needs Continuous Monitoring After Login

Identity checks such as presenting an ID, taking a selfie or completing a liveness test can establish who is signing in. But passing that check does not prove the same person remains in control…

menu_book2 min read visibility1 reads history3 weeks ago linkTechRadar share

Cybersecurity

Review Finds Data Tracking on 9 of 14 Banking Sites

A review of 14 financial-services websites in Europe and the United States found tracking scripts sending customer information to third parties. On 9 of the 14 sites, this happened without a valid consent choice,…

menu_book2 min read visibility1 reads history3 weeks ago linkTechRadar share

Cybersecurity

Citrix urges admins to patch new NetScaler RCE flaw

Citrix is urging IT administrators to update affected NetScaler systems after disclosing a critical vulnerability that could allow remote code execution or cause a denial-of-service condition. Tracked as CVE-2026-107406,

menu_book2 min read visibility1 reads history3 weeks ago linkBleepingComputer share

Cybersecurity

Hackers Earn $1,262,000 for 98 Zero-Days at Pwn2Own Ireland 2026

The Pwn2Own Ireland 2026 hacking contest has ended, with participants earning $1,262,000 after exploiting 98 zero-day flaws, according to BleepingComputer. Ikotas Labs led the competition with 42.5 Master of Pwn points a

menu_book2 min read visibility1 reads history3 weeks ago linkBleepingComputer share

Cybersecurity

FBI Seizes Seven Domains Tied to Chinese Hacking Tools

The FBI seized seven domains linked to two hacking platforms used by Flax Typhoon, a China-linked group, in attacks on critical infrastructure and other organizations worldwide. U.S. authorities say the platforms were op

menu_book2 min read visibility1 reads history3 weeks ago linkBleepingComputer share

Cybersecurity

Ransomware attack disrupts Japan’s IDCF Cloud service

Japanese cloud provider IDC Frontier says a ransomware attack disrupted its IDCF Cloud service, causing an outage in a data center cluster serving eastern Japan. The company said the attack began on October 7…

menu_book2 min read visibility1 reads history3 weeks ago linkBleepingComputer share

Cybersecurity

Low-cost Android phones ship with residential proxy malware

A malware campaign dubbed Midnight Mimosa has been found on low-cost Android phones with MediaTek chipsets. The malicious software is embedded in device firmware and can silently install apps, commit advertising fraud, a

menu_book2 min read visibility1 reads history3 weeks ago linkBleepingComputer share

Cybersecurity

FakeGit campaign returns with 17,610 malicious GitHub repositories

The FakeGit campaign resumed on October 4, using 17,610 GitHub repositories to distribute SmartLoader malware, according to researchers at software supply-chain security platform Apiiro. Apiiro says the repositories use

menu_book2 min read visibility1 reads history3 weeks ago linkBleepingComputer share

Cybersecurity

PoeLLM Uses a GitHub Poem to Infect More Than 3,000 Devices

Researchers at Lumen’s Black Lotus Labs identified malware that uses a poem on GitHub to find its command-and-control (C2) server. They call the technique “adversarial poetry” and said they had not seen anything like…

menu_book1 min read visibility1 reads history3 weeks ago linkTechRadar share