A cybercrime investigation has linked the administrator of Qilin ransomware to Aleksey Mikhailovich Yakovtsev, a 36-year-old man living in St. Petersburg,…
EU Digital Fairness Act targets app design practices
The European Union is moving forward with the Digital Fairness Act, proposed legislation that would ban manipulative design practices commonly found in…
Lenovo Warns of High-Severity Server Flaw That Restores Default Root Credentials After Reset
Lenovo has disclosed a high-severity security flaw in ThinkSystem V4 server management firmware that restores a default OpenBMC root password after a…
GPUStack Auth Bypass Exploit Attempts
Active exploitation attempts are targeting CVE-2026-102895, a critical authentication bypass vulnerability in GPUStack, open-source software used to…
AWS MCP Gateway Security Flaw Allowing Access to Internal Networks and Cloud Credentials
AWS has fixed a server-side request forgery flaw in mcp-gateway-registry that could let an authenticated attacker reach internal services through the…
EU tech buyers shift to local cybersecurity vendors
European technology buyers are shifting their cybersecurity purchasing patterns toward local vendors in response to digital sovereignty concerns and…
Romania says it stopped Russian cyberattack targeting government emails
Romania’s intelligence agency said it stopped a cyber-espionage campaign by Russian state-linked hackers before the group exfiltrated sensitive data.
Hackers Breach Global Shipping Giant Maersk and Claim Theft of 100GB of Logistics Data
A.P. Moller–Maersk has confirmed that hackers accessed an older IT system and extracted data, as a group calling itself WhiteArmor claims it stole 100GB…
Software developers need an Agentic manifesto
I can’t decide whether Agile development is completely dead or about to make a huge comeback. Or maybe Waterfall will. Who knows? Coding agents are…
0% GPU utilization: How SANSAR hides Linux cryptomining
Elastic Security Labs analyzes SANSAR, a Linux cryptomining orchestrator that manages miners over Tor, alongside a kernel rootkit, GPU monitoring hooks…
Almost 50 arrested as police target Western Balkan network linked to killings
Nearly 50 suspects have been arrested in an international operation targeting a drug trafficking network with Western Balkan members, linked to killings,…
Chrome, Firefox Updates Patch Over 180 Vulnerabilities
Google fixed 83 flaws with a new Chrome 157 release, and Mozilla addressed 99 bugs in Firefox 160.
YouHack – 7,160,849 breached accounts
In May 2013, the Russian-language hacking forum YouHack suffered a data breach that was later redistributed as part of a larger corpus of data . The…
Check Point Expands Its FedRAMP Certification to Include Check Point WAF
The federal, state, local government, and education sectors are under growing cyber pressure, and the attack surface is shifting to where they now serve…
Operation Endgame malware takedown turns up over 6 million stolen logins
Police in nine countries, working with Europol, took down servers behind the Gootloader, CastleRAT and StealC malware operations this week and recovered…
Microsoft Fixes 1235 Flaws in Another Record Patch Tuesday
Microsoft patched a record-breaking 1235 CVEs in November’s Patch Tuesday
New ASEAN Scam Hub Offers Free Training as Singapore Proposes Anti-Scam Code
A new ASEAN scam hub offers free fraud training and local reporting contacts across 11 countries, alongside Singapore’s proposed anti-scam safeguards.
CISA Warns of Actively Exploited Microsoft Outlook Zero-Day Vulnerability
The Cybersecurity and Infrastructure Security Agency has added CVE-2026-124194, an actively exploited Microsoft Outlook spoofing vulnerability, to its…
Microsoft Warns Hackers Are Using GSocket Backdoors to Keep Linux Servers Compromised After Patching
Microsoft has warned that attackers are using a free remote access tool called GSocket to stay inside Linux servers even after the original security hole…
MCP and A2A alone won’t scale AI agents
Two protocols define how AI agents connect to internal resources and collaborate with other AI agents. The Model Context Protocol (MCP) is well known…
Attacker Targets 60,000 GitHub Repositories in Credential Theft Campaign
Using thousands of hijacked accounts, the wfx-loot campaign planted a CI secret stealer that ran in over 1,800 GitHub repositories.
A Single Branch No Longer Operates in A Single Place
Branch Traffic Has Changed. Security Has to Follow. A traditional branch was simple in nature: a location that connects back to headquarters where…
Lego Takes BrickLink Marketplace Offline After Detecting Unusual Activity
Lego has taken its BrickLink Marketplace offline after detecting unusual activity as the company investigates the incident
ESET Blocks Over 700,000 Cruciferra Malware Attacks Using Advanced Encryption to Evade Antivirus Detection
ESET says it has blocked more than 700,000 compromise attempts linked to Cruciferra since January 2026. Türkiye, Greece and Spain were the most affected…