When everyone is an ‘analyst’, expertise loses meaning
Australia has developed a growing class of self-declared geopolitical analysts and independent researchers who built their reputations not through research,...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
California Enacts New Law Governing Online Services Accessed by Children
On September 10, 2026, California’s governor signed AB 2246, a bill that repeals and replaces the California Age-Appropriate Design Code...
FTC to Launch New Study on Personalized Pricing
Federal Trade Commission Chairman Andrew Ferguson recently announced plans for a new study of personalized pricing under Section 6(b) of...
Shaq Got Hacked. Now He’s Pitching for a VPN
At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public...
Smashing Security podcast #487: Clippy’s crypto comeback
Microsoft’s Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft,...
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6....
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Ravie LakshmananOct 07, 2026Supply Chain / Malware Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign...
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
Swati KhandelwalOct 07, 2026Vulnerability / Network Security SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways...
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
Swati KhandelwalOct 07, 2026Vulnerability / Artificial Intelligence A critical vulnerability in LMCache, open-source software that speeds up large language model...
PoeLLM Malware Infects 3,400+ Servers to Expand Crypto Mining Botnet
Ravie LakshmananOct 07, 2026Botnet / Cryptojacking Cybersecurity researchers are calling attention to a new malware family that has been observed...
Best Smart Home Security Cameras for 2026: Ring, Nest, Arlo and Eufy
The best smart home security camera is not necessarily the one with the highest resolution. Video quality, power source, detection...
Use AI to Hunt Bugs Smarter With This $14.99 Course
TL;DR: This lifetime AI Bug Bounty Automation course teaches you to use AI for bug bounty recon, payload ideas, attack...
Google October Update Fixes Pixel Bugs as Pixel 6 Nears End of Support
Google’s October Android updates combine routine system changes with more important security and reliability fixes for Pixel phones. The latest...
Meta Faces First Ofcom Probe Under Online Safety Act Over Instagram Instants
Ofcom is investigating whether Meta launched Instagram’s disappearing-photo feature without completing the safety assessments required under UK law. The UK...
Dutch Tax Agency Reverses Microsoft 365 Cloud Migration Over Data Risks
The Netherlands’ Tax and Customs Administration is backing away from a planned Microsoft 365 cloud migration after an ICT review...