Malicious Apache Modules Hijack Brazilian Government Site Traffic to Push Betting Pages
A Chinese-speaking cybercrime cluster known as Gambling Goblin has been observed installing malicious Apache modules on compromised web servers run...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
BGP Hijack Delivers Malicious Virtualizor Update That Establishes Persistent Root Access
Swati KhandelwalSep 02, 2026Network Security / Supply Chain Attack Virtualizor said hackers used a Border Gateway Protocol (BGP) hijack to...
Meta Ads Push StreamRat Android Trojan That Can Gain Near-Complete Device Control
The Hacker NewsSep 02, 2026Malvertising / Mobile Security Cybersecurity researchers have disclosed details of a new Android banking trojan called...
SonicWall SMA1000 vulnerabilities (CVE-2026-83548, CVE-2026-83549) in active exploitation
On September 1, 2026, SonicWall disclosed two vulnerabilities in SonicWall SMA1000 appliances. Models 6210, 7210, and 8200v are affected.CVE-2026-83548 is...
Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware
Iran-linked APT Mirage Kitten Uses Fake Job Tests to Spread Malware Pierluigi Paganini September 02, 2026 Mirage Kitten used fake...
Hackers Target Langflow in CVE-2026-0768 Attacks
Hackers Target Langflow in CVE-2026-0768 Attacks Pierluigi Paganini September 02, 2026 Hackers are exploiting a critical Langflow flaw that lets...
Wireless Routers as Motion Detectors
Wireless Routers as Motion Detectors Comcast has added motion detection as a feature to its wireless routers: The feature sends...
The ultimate Chrome keyboard shortcut upgrade
Tab-da’s on-demand tab switcher in action — a faster, easier way to get where you want to go in your...
Attackers Exploit Two SonicWall SMA 1000 Zero-Days That May Form an Attack Chain
Ravie LakshmananSep 02, 2026Vulnerability / Network Security SonicWall has released security updates to address two security flaws impacting its Secure...
GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends
Swati KhandelwalSep 02, 2026Vulnerability / Web Security Two vulnerabilities in GeoNetwork can be chained to achieve unauthenticated remote code execution...
Extradited Russian Hacker Faces Charges Over Excel Malware Campaign That Infected Thousands
Swati KhandelwalSep 02, 2026Malware / Cybercrime The U.S. Department of Justice (DoJ) has charged a Russian national, extradited from Cyprus...
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research - Vedere Labs said it used Anthropic's Claude to port a working pre-authentication remote code execution (RCE) exploit...
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Ravie LakshmananSep 02, 2026Vulnerability / Network Security Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise...
Telstra sowed seeds for its July mobile outage in 2020. Six years on they sprouted.
When Telstra engineers embarked on a simple server chassis replacement exercise in 2020, they could barely have contemplated the complex...
Postcard from PIF: China backs down from threat after Pacific leaders react
At the opening ceremony of the Pacific Islands Forum Leaders meeting in Palau on Sunday, China’s Pacific envoy, Qian Bo,...
