Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram
Researchers Uncover Rentable Android Spyware uCreater Targeting WeChat and Telegram Pierluigi Paganini October 26, 2026 uCreater is Android spyware disguised...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Microsoft Teams to get AI protection against phishing and fraud
if ( !emtpy($headline_subheadline ) ) : ?> The new tool analyzes users' conversations for suspicious behavior and will begin rolling...
Apple’s triple-whammy week begins with iPad mini
if ( !emtpy($headline_subheadline ) ) : ?> Sleeker, lighter, and sporting an OLED display, the new iPad mini starts at...
PHP Issues Second Windows Security Update in Five Days to Fix Brotli Code Execution Flaw
Swati KhandelwalOct 26, 2026Vulnerability / Web Security PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to...
Attackers Use Microsoft Teams IT Support Scams to Deploy Malware and Ransomware
Cybersecurity researchers are calling attention to what they say is a "recurring social engineering pattern" across hundreds of cases in...
⚡ Weekly Recap: This2Shell, That2Shell, Everything’s an RCE? Rogue AI, Supply Chain Chaos and More
This2Shell, That2Shell, Everything2Shell. That's pretty much how the last week went. Critical bugs that let attackers run code remotely are...
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Modules Escape Sandboxes
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module...
Your Older Android Phone Is Getting a New Scam Defense — Here’s What Google Changed
Your Android phone could be getting another defense against scammers, even without a major operating system upgrade. Google is extending...
The breachpocalypse is here
Seven incidents in seven daysLast week I sent our leadership team a list. In seven days, Sophos' internal SecOps team...
The US Government Is Hiding a Secret Court Ruling About How It Spies on Americans
Two US senators say the Trump administration is breaking the law by withholding the FISA court decision while it presses...
Technology has changed. So should the conversation.
if ( !emtpy($headline_subheadline ) ) : ?> Technology is now too important to leave the discussion entirely to the companies...
PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts
PHP2Shell: Suspected North Korean campaign targets 216 vulnerable PHP hosts Pierluigi Paganini October 26, 2026 Cyfirma links PHP2Shell scans of...
Anthropic reveals how Claude Mythos 5 crossed security testing boundaries
Anthropic reveals how Claude Mythos 5 crossed security testing boundaries Pierluigi Paganini October 26, 2026 Anthropic says Claude Mythos 5...
Bias in Qwen3-Coder Model
Bias in Qwen3-Coder Model Interesting research: TL;DR: Chinese AI models now sit inside Western products, and some carry geopolitical triggers:...
Between alerts: What Attackers Do in the Spaces Ordinary Detection Misses
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how...
