StyleSmuggler: The Magento Zero-Day Behind New Store Attacks
StyleSmuggler: The Magento Zero-Day Behind New Store Attacks Pierluigi Paganini September 07, 2026 StyleSmuggler Magento zero-day is under active attack,...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution
Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for...
Reading sci-fi could help us plan for futures stranger than fiction
Analysts and policymakers increasingly need to consider unprecedented events. Science fiction offers an underutilised but accessible method for exploring and planning for possible...
Europe’s biggest mobile operators in talks for satellite-to-mobile venture
Deutsche Telekom, Orange, Vodafone Group and Telefonica are in early talks to create a consortium to bid on European Union...
Cathay Pacific, Google expand AI trials to cut contrails
Cathay Pacific and Google are expanding trials of an AI-powered technology designed to help cut climate-warming aircraft contrails. ...
SA Power taps AI to reduce field job “knockbacks”
Key points SA Power Networks is testing AI to predict when field work will hit obstacles that force projects back...
NSW Police gets extra $15m for “digital forensics” technology
Key points NSW Police are set to receive an extra $15 million to access encrypted devices and digital platforms as...
Chaotic Eclipse Released A PoC For NVIDIA GreenSection Memory Corruption Zero-Day
Chaotic Eclipse Released A PoC For NVIDIA GreenSection Memory Corruption Zero-Day Pierluigi Paganini September 07, 2026 Chaotic Eclipse released GreenSection,...
Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks
Ravie LakshmananSep 07, 2026Phishing / Identity Security Threat hunters have disclosed details of a widespread data theft and extortion threat...
⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More
Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code...
Your Cloud Security Checklist Doesn’t Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026...
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Ravie LakshmananSep 07, 2026Malware / Vulnerability Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute...
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution —...
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
Only the organizations enrolled in its Daybreak cybersecurity program were able to access the model, whereas Plus, Pro, Business, and...
JSCeal Hides Crypto Malware in V8 Bytecode
JSCeal Hides Crypto Malware in V8 Bytecode Pierluigi Paganini September 07, 2026 JSCeal hides crypto-stealing malware in V8 bytecode, but...
