FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure
For years, China's military and intelligence agencies, which carry out hacking campaigns against targets around the globe, have grown increasingly...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure Pierluigi Paganini August 26, 2026 FBI seizes QScan...
Spyware for Babies
Spyware for Babies The New York Times has a long article (alt link) on surveillance systems aimed at babies. They...
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated...
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
Ravie LakshmananAug 26, 2026Malware / Cyber Espionage Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus...
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that's used as a proxy to...
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
Swati KhandelwalAug 26, 2026Red Teaming / Security Operations The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results...
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote,...
WhatsApp Just Added 3 New Ways to Protect Your Account
WhatsApp is adding three new security features designed to make account takeovers and scam calls harder to pull off. The...
The Password Notebook Is Back — but Is It Actually Safer?
The password notebook is making an unlikely comeback, and this time security professionals have more reason to take the idea...
TikTok Agrees to $400M Settlement Over Children’s Privacy
TikTok’s long-running fight with the US government over children’s data now carries a price tag of up to $400 million....
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 26, 2026 U.S. Cybersecurity and Infrastructure...
88 ID Verification Breaches Show the Cost of Collecting Identity Data
88 ID Verification Breaches Show the Cost of Collecting Identity Data Pierluigi Paganini August 26, 2026 88 ID-verification breaches exposed...
WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion
WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion Pierluigi Paganini August 26, 2026 WhatsApp says 1 billion users now...
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams
Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams Pierluigi Paganini August 26, 2026 INTERPOL’s Operation Jackal...