Meta Failed to Catch Hundreds of AI Child Abuse Ads. Some Included Images of Real Kids
Editor’s note: This article contains descriptions of imagery depicting child sexual abuse. Reader discretion is strongly advised.Early last month, Meta...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data
Massive Vietnam-Linked APIS Database Exposes Passport and Flight Data Pierluigi Paganini September 08, 2026 An exposed Vietnam-linked APIS database contained...
North Korea-linked Hackers Hide a Backdoor Inside HAProxy
North Korea-linked Hackers Hide a Backdoor Inside HAProxy Pierluigi Paganini September 08, 2026 North Korea-linked hackers hid a backdoor inside...
IT Help Desk Impersonation Lets Hackers Bypass MFA
IT Help Desk Impersonation Lets Hackers Bypass MFA Pierluigi Paganini September 08, 2026 Attackers bypass endpoint security by posing as...
Stealing AI Reasoning Traces
Stealing AI Reasoning Traces Interesting research: “Stealing Reasoning Traces from Proprietary LLM APIs“: Abstract: Leading large language model providers now...
Apple after Cook: The Ternus age begins this week
While Cook was frequently criticized for not being a product guy, he presided over the launch of the Apple Watch,...
Judge spares Google’s ad-tech business from a breakup
The specific obligations Google will face are not yet public, because Brinkema’s explanatory opinion remains under seal. Earlier, Google had...
BigBear 2.0 phishing campaign hijacks Microsoft 365 sessions after MFA
He recommended disabling or containing the affected account, revoking Entra sign-in sessions and refresh tokens, and forcing reauthentication. Incident responders...
FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials
A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing...
Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell
Ravie LakshmananSep 08, 2026Vulnerability / Web Security Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce...
BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams
Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware...
Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing
Ravie LakshmananSep 08, 2026Data Privacy / Regulation Online dating app Grindr has opted to pay £26 million ($35.1 million) to...
Proofpoint Strengthens Executive Leadership Team with Appointment of Chief Legal Officer and Chief People Officer
Brian Levey and Puja Jaspal join executive leadership team to help drive Proofpoint's next phase of global growth and innovation...
Before You Paste Anything Into ChatGPT, Check This List
The next piece of sensitive information you expose may not end up on a phishing site. You may paste it...
AI Could Shrink the Supply of Exploits Governments Rely On
AI could create a problem governments have spent years trying to avoid: fewer undiscovered software vulnerabilities available to exploit. Governments...