Claimed Bug Bounty Hunter Likely Used LLM to Build PhantomRaven npm Stealer
Ravie LakshmananSep 18, 2026Malware / Cybercrime A financially motivated threat actor has been linked to the development and distribution of...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
Ravie LakshmananSep 18, 2026Mobile Security / Malware Cybersecurity researchers have flagged a new Android malware called RatHat that's assessed to...
Beware the SparroWock: The backdoor that bites, the commands that catch
ESET Research’s ongoing monitoring of FamousSparrow has borne fruit once again. Our previous public report on FamousSparrow revealed that this...
Ukraine and the Middle East teach the Indo-Pacific about the new space wars
On 14 September, US Secretary of the Air Force Troy Meink publicly announced that the US Space Force had deployed...
Katherine Bennell-Pegg’s ISS mission would boost Australia’s standing in space
Sending Katherine Bennell-Pegg to space should be a small step forward for one woman that enables Australia to take giant...
Critical Check Point Management Flaw Lets Unauthenticated Attackers Run Code as Root
A critical vulnerability in Check Point's Security Management and Log Servers could allow an attacker without login credentials to run...
ThreatsDay: Self-Rewriting Agents, 800+ Flaws Patched, Insider SIM Swaps and 22 More New Stories
Ravie LakshmananSep 17, 2026Hacking News / Cybersecurity News Attackers keep finding new keys. The funny part is that defenders keep...
Critical Docker Sandboxes Flaw Lets Malicious Guest Code Read and Modify macOS Host Files
Swati KhandelwalSep 17, 2026Vulnerability / Artificial Intelligence Malicious code running inside a Docker Sandboxes virtual machine on macOS could escape...
Iran-Linked Handala Hack Tied to HEAVYGRAM Telegram Backdoor That Can Steal Passwords
The Iran-linked "hacktivist" persona known as Handala Hack has been attributed to a Telegram-based surveillance backdoor called HEAVYGRAM and a...
An undisclosed Microsoft presentation is now central to a multi-million dollar antitrust fight
if ( !emtpy($headline_subheadline ) ) : ?> A new court order demands additional documents tied to allegations that Microsoft used...
China is building an AI system for tailoring its foreign propaganda
China’s propaganda is often mocked as blunt, loud and tone-deaf. But state-backed researchers are trying to make it more sophisticated....
OpenAI admits its models lie to cover their own mistakes
OpenAI admits its models lie to cover their own mistakes Pierluigi Paganini September 17, 2026 OpenAI launches a formal framework...
Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk
Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk Pierluigi Paganini September 17, 2026 Cyberattacks on oil tankers show...
CISA Gives Agencies 3 Days to Patch Exploited Pixel Zero-Day
Google disclosed this week that an unknown group of attackers actively weaponized a zero-day security flaw inside the cellular modem...
China’s Answer to AI Safety: More Controls, Not Slower Development
China does not appear ready to slow the development of increasingly powerful AI. Instead, it is building rules intended to...
