ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices
Apple Tightens macOS Full Disk Access as AI Agents Become More Powerful
Apple plans to add stronger controls to Full Disk Access in macOS, warning that the powerful permission can expose a user’s most private data as AI agents…
Google Narrows Open Source Bug Bounty Amid Wave of Invalid Automated Reports
Google has temporarily stopped accepting product vulnerability reports through its Open Source Software Vulnerability Reward Program (OSS VRP).
Secure the Grid: What Executive Order 14421 Means for Zero Trust
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: Secure the Grid: What Executive Order 14421 Means for Zero Trust
Company Behind Graphite Spyware Speaks for First Time about Italy Abuse and Accountability
[The following is an excerpt from a piece I recently published at Wired. See link below to read the full story.] Spyware maker Paragon Solutions has long…
Proposed anti-Flock bills could spell trouble for license plate readers
Two sets of US lawmakers introduced bills in late September and early October to tackle the growing concerns about automated license plate readers.
Cyber Briefing: 2026.10.05
Deepfakes, evolving phishing techniques, large-scale data exposure, AI-related access risks, and regulatory changes are reshaping how security teams…
Google Pauses Open-Source Bug Bounty Program After Flood of Invalid AI-Generated Reports
Google has temporarily stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program(OSS VRP)…
Prime Big Deal Days: scammers stock up early as Amazon impersonation attacks nearly triple
For millions of shoppers, Prime Big Deal Days on 6 and 7 October are about grabbing a bargain before the festive rush. For cybercriminals, it is harvest…
Harvest Now, Decrypt Later: The Attack You Defend Against by Doing Nothing
Somewhere, an attacker is recording your encrypted traffic. Not breaking it. Recording it. The bet is patient and simple: store ciphertext today, wait for…
Google Suspends Open-Source Bug Bounty Until 2027
Google announced on October 1 that it is suspending its Open Source Vulnerability Rewards Program (OSS VRP) until 2027, citing an overwhelming increase in…
Alleged dev of Ploutus ATM malware appears in US court after arrest
The U.S. Department of Justice has announced the arrest of the alleged developer of Ploutus malware, used to steal millions of dollars in ATM jackpotting…
Stellar Cyber 7.0 adds measurable workflows for AI-powered SOCs
Stellar Cyber has announced Stellar Cyber 7.0, a release that advances the Human-Augmented Autonomous SOC from a vision for applying AI to security…
Google Gemini Will Soon Get Full Access Permission to Use Your Computer
Google’s Gemini Desktop app may soon introduce a “Full Access” permission that would let the AI assistant read files, control applications, access network…
Citrix NetScaler Targeted Via New Zero Day
The memory buffer vulnerability can result in denial of service to customers, with CISA warning it poses “significant risks” to the federal government
U.S. CISA adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Citrix NetScaler flaw to its Known Exploited Vulnerabilities catalog. The U.S.…
Denmark’s CPR breach exposes 8.8 million people as experts warn over trusted third-party access
Personal details belonging to around 8.8 million people have been exposed in a breach of Denmark’s Central Person Register (CPR), after unauthorised…
47-Day Certificates Are Coming: Five Things to Do Before They Arrive
Somewhere in your organization is a spreadsheet of certificate expiry dates, and someone who owns it. That is not a caricature. DigiCert’s 2026 research…
Senate Passes Healthcare Cybersecurity Bill
The U.S.
tenfold CE: Our free Identity Governance tool just got 2 new features
tenfold has added shared content governance and real-time event auditing to its free Community Edition for organizations with under 150 users. The new…
Fake brand discounts on social media prey on shoppers’ fear of missing out
Cybercriminals are using fake discounts posted on Facebook and TikTok to lure shoppers to phishing sites that steal their payment card details and…
CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks
The U.S. Cybersecurity and Infrastructure Security Agency has added a Citrix NetScaler vulnerability, tracked as CVE-2026-88779, to its Known Exploited…
New Stealthy Linux Backdoors Target Telecoms, Masquerade as Email Traffic
Rapid7 has uncovered new BPFDoor, BPF Rekoobe and AVERAT malware variants targeting telecom and network-edge appliances in South Korea and Taiwan
GlassWorm Supply Chain Attack Uses Fake VS Code Themes to Deliver Hidden Malware
GlassWorm is turning developer tools into malware delivery channels, this time through extensions advertised as attractive VS Code themes. The…