Critical PwnEscape Linux Kernel Vulnerability Lets Guest VMs Read Host Memory
A newly disclosed critical flaw in the Linux kernel allows code inside a virtual machine to read memory on the...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
ThreatsDay: Adobe RCE, DNS Wallet Theft, NVIDIA Container Escape, Self-Healing Backdoor + 23 More
Ravie LakshmananOct 15, 2026Hacking News / Cybersecurity News Someone built a tool to steal data, then decided it should scare...
Proofpoint to Acquire Varonis in a $6.3 Billion Transaction
Combination creates a new cybersecurity powerhouse to deliver a complete security platform that protects against AI-accelerated threats and data risks...
In a contested Indo-Pacific, undersea power is critical. AUKUS is our strategy
AUKUS is not just a submarine acquisition program; it is a long-term strategy for strengthening Australia’s agency in a contested...
ASIC’s security and data chiefs to leave in December
Key points ASIC's CISO Jamie Norton and senior executive leader for data, analytics and AI Graham Jefferson have both resigned,...
The Quantum Leap: Preparing for Post Quantum Cryptography Featuring Utimaco Inc.
Welcome to the PCI Security Standards Council’s blog series, The Quantum Leap: Preparing for Post Quantum Cryptography. This special, ongoing...
From Cyber Security to Digital Trust: What I Told NATO’s Counter-Terrorism Experts in Ankara
Published: 15 October 2026 From Cyber Security to Digital Trust: What I Told NATO’s Counter-Terrorism Experts in Ankara Conference talkNATO...
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks
AdFection: Beyond the Click: Citizen Lab Exposes Ad-Delivered Spyware Networks Pierluigi Paganini October 15, 2026 Spyware vendors use online ad...
Measuring Human Cryptanalysis Effort
Measuring Human Cryptanalysis Effort Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have...
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online...
Silent Lynx Exploits WinRAR Flaw to Deploy Reverse Shell in CIS Government Attacks
Ravie LakshmananOct 15, 2026Cyber Espionage / Malware The threat actor known as Silent Lynx has been attributed to a fresh...
Help TDS Linked to Hotejka as 20,000+ Cloudflare Pages Domains Host Tech Support Scams
A long-running Traffic Distribution System (TDS) known as Help TDS to a Russian-language affiliate program called Hotejka, which appears to...
NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May...
