NSW Police gets extra $15m for “digital forensics” technology
Key points NSW Police are set to receive an extra $15 million to access encrypted devices and digital platforms as...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Chaotic Eclipse Released A PoC For NVIDIA GreenSection Memory Corruption Zero-Day
Chaotic Eclipse Released A PoC For NVIDIA GreenSection Memory Corruption Zero-Day Pierluigi Paganini September 07, 2026 Chaotic Eclipse released GreenSection,...
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Ravie LakshmananSep 07, 2026Phishing / Identity Security Threat hunters have disclosed details of a widespread data theft and extortion threat...
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code...
Your Cloud Security Checklist Doesn’t Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026...
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Ravie LakshmananSep 07, 2026Malware / Vulnerability Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute...
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution —...
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
Only the organizations enrolled in its Daybreak cybersecurity program were able to access the model, whereas Plus, Pro, Business, and...
JSCeal Hides Crypto Malware in V8 Bytecode
JSCeal Hides Crypto Malware in V8 Bytecode Pierluigi Paganini September 07, 2026 JSCeal hides crypto-stealing malware in V8 bytecode, but...
Why AI Agent Sandboxes Are Failing Security Tests
Why AI Agent Sandboxes Are Failing Security Tests Pierluigi Paganini September 07, 2026 Autonomous AI agents escaped a sandbox and...
Berlin Ransomware Leak Exposes State Secrets
Berlin Ransomware Leak Exposes State Secrets Pierluigi Paganini September 07, 2026 Berlin refused a 30 Bitcoin ransom, leading hackers to...
How a hole in Lenovo’s login system let hackers walk into 5,000 Dropbox accounts
If you ever linked your Dropbox account to a Lenovo ID - perhaps to make life easier when logging in...
Automobile Camouflage to Hide from Flock Cameras
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
16 Gmail power moves for more efficient inbox management
Gmail’s attachment tiles are a great way to jump directly to attachments without having to open an email. Creating new...
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4....
