Compromised GitHub Actions Came Back Online and Resumed Executing Mini Shai-Hulud Malware
Ravie LakshmananSep 25, 2026Malware / Supply Chain Attack Two actions-cool GitHub Actions have been disabled for a second time after...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
PamStealer macOS Malware Adds Live C2 Payload Decryption and Multi-Layer Persistence
Ravie LakshmananSep 25, 2026Malware / Social Engineering Cybersecurity researchers have flagged a new version of PamStealer that ensures that the...
The SOC Doesn’t Need to Start Over with Every Alert
Security leaders keep debating whether AI will produce an entirely new class of cyberattack. The nearer change is quieter and...
Discord Wants to Estimate Your Age Without Asking for ID
Discord is moving age checks into the background. The platform began rolling out a new age-assurance system this week that...
Google Chrome 154 Fixes 108 Security Flaws: 11 Are Rated Critical
Google Chrome users have another major security update waiting, and this one closes more than 100 vulnerabilities at once. Google...
WordPress Flaw Under Active Attack: Hackers Target CVE-2026-87902 for Code Execution
Attackers wasted little time exploiting a recent WordPress vulnerability in the wild. Threat actors are actively targeting CVE-2026-87902, a critical...
Meta floats project to lay first petabit submarine fiberoptic cable
if ( !emtpy($headline_subheadline ) ) : ?> Petal will have twice the capacity of any other undersea cable yet built...
Google plans Gemini 4 release before year-end
if ( !emtpy($headline_subheadline ) ) : ?> But the long-promised Gemini 3.5 Pro is still nowhere to be seen. endif;...
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway
AI-Powered CARBONATO Botnet Steals Credentials to Fund Its Own LLM Gateway Pierluigi Paganini September 25, 2026 CARBONATO exploits exposed Docker...
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Adobe and WSO2 flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 25, 2026 U.S. Cybersecurity and...
On Anthropic’s AI Misuse Report
On Anthropic’s AI Misuse Report Earlier this month, Anthropic published a long report detailing all of the Claude misuses it...
Around the corner: Agentic AI PCs that cut token costs
if ( !emtpy($headline_subheadline ) ) : ?> The new systems won't be cheap, but they will likely cut recurring cloud...
Bitget Says Suspected North Korean Hackers Stole $351.6M After Backend Compromise
Ravie LakshmananSep 25, 2026Cryptocurrency / Cybercrime Cryptocurrency exchange Bitget said suspected North Korean threat actors have stolen $351.6 million from its...
Roundcube Pre-Auth SQL Injection Flaw Actively Exploited in the Wild
Ravie LakshmananSep 25, 2026Vulnerability / Email Security The Canadian Centre for Cyber Security has warned that a now-patched Roundcube Webmail...
Cloudflare Fixes Flaw That Let One Container Read Another Customer’s Leftover Disk Data
Swati KhandelwalSep 25, 2026Cloud Security / Vulnerability A flaw in Cloudflare Containers let a paying customer read data that other...
