Flock Offers Employees Buyouts as Customers Flee
As dozens of cities end contracts for its controversial license plate readers, Flock is rolling out a voluntary severance program,...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Brevo Supply-Chain Attack Infected Over 100,000 Websites
Brevo Supply-Chain Attack Infected Over 100,000 Websites Pierluigi Paganini September 18, 2026 A Brevo supply-chain attack used compromised Cloudflare access...
Friday Squid Blogging: On Squid Egg Sacs
Friday Squid Blogging: On Squid Egg Sacs Short essay about squid egg sacs. As usual, you can also use this...
Public Exploits Released for Four Linux Kernel Flaws That Enable Local Root
A security researcher has released working exploit code for four Linux kernel flaws that each let a local user gain...
An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang
TeamPCP pulled off the worst-ever software supply-chain hacking spree and breached thousands of companies. Now Google’s threat intelligence group has...
Gyazo Data Breach Exposes 23 Million User Records
Gyazo Data Breach Exposes 23 Million User Records Pierluigi Paganini September 18, 2026 A Gyazo breach exposed 23 million user...
Microsoft mops up after Patch Tuesday broke logins, audio, Excel
if ( !emtpy($headline_subheadline ) ) : ?> Patch early and often, but not too early or you'll be doing it...
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
if ( !emtpy($headline_subheadline ) ) : ?> A new phishing kit abuses a legitimate Microsoft device authorization flow to steal...
With Siri Recap, Apple threw a punch at OpenAI no one saw coming
if ( !emtpy($headline_subheadline ) ) : ?> If it manages to force regulation to define appropriate use of ambient AI,...
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
Swati KhandelwalSep 18, 2026Vulnerability / Web Security WordPress today released patches to fix a new set of vulnerabilities in its...
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
Ravie LakshmananSep 18, 2026Malware / Cyber Espionage The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan)...
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Ravie LakshmananSep 18, 2026Vulnerability / Cloud Security Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry...
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been...
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin...
Google Opens Google Home to Claude and Other AI Agents — Here’s What They Can Control
The smart home is becoming another place where AI agents can act, not just answer questions. Google began rolling out...
