Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
The North Korean state-sponsored threat actor known as Kimsuky (aka Velvet Chollima) has been attributed to a fresh set of...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Ravie LakshmananMay 28, 2026Vulnerability / Open Source A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted...
Threat Actors Exploit Critical FortiClient EMS Flaw to Deploy Credential Stealer
Ravie LakshmananMay 28, 2026Vulnerability / Endpoint Security Threat actors are continuing to exploit a critical, now-patched security flaw impacting FortiClient...
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account Removal
Ravie LakshmananMay 28, 2026Zero Day / Vulnerability Disclosure Microsoft has come out strongly in favor of Coordinated Vulnerability Disclosure (CVD),...
ThreatsDay Bulletin: Claude Security Plugin, Azure Priv-Esc, Kali365 MFA Bypass, FIFA Scams +15 More
Ravie LakshmananMay 28, 2026Hacking News / Cybersecurity News Every time you think the industry has finally stopped doing some reckless,...
ShinyHunters Alleges 42M Records Stolen from Charter Communications
Voice phishing is becoming a cloud security problem, not just a help desk problem. Charter Communications confirmed a cybersecurity incident...
Krispy Kreme Settlement Deadline Nears: Eligible Members Could Claim Up to $3,500
Krispy Kreme’s data breach settlement is entering its final stretch, and eligible victims have only weeks left to claim cash...
FBI Warns Companies About Ransom Gang’s Fake IT Support Tactics
For some ransomware crews, the fastest route to a payout may no longer be locking systems. It may be walking...
Apple May Bring Android-Style Theft Detection to iPhones
Apple appears to be taking a leaf out of Android’s book with a new feature that locks an iPhone as...
Google’s $135M Android Privacy Settlement: Who May Be Eligible
Image: Daniel Romero/Unsplash Google’s $135 million Android settlement could pay eligible US users who used Android devices with cellular data...
Sophos Firewall and Synchronized Security
If you look at what’s required to properly secure a modern network, it breaks down into three pillars: hardening, protection,...
Sophos Firewall and Synchronized Security
If you look at what’s required to properly secure a modern network, it breaks down into three pillars: hardening, protection,...
Sophos Firewall and Synchronized Security
If you look at what’s required to properly secure a modern network, it breaks down into three pillars: hardening, protection,...
Sophos Firewall and Synchronized Security
If you look at what’s required to properly secure a modern network, it breaks down into three pillars: hardening, protection,...
Sophos Firewall and Synchronized Security
If you look at what’s required to properly secure a modern network, it breaks down into three pillars: hardening, protection,...
