TerminalFix and Lorem Ipsum Loader enable covert tunneling
In August 2026, Sophos analysts began investigating a series of Managed Detection and Response (MDR) cases that involved ClickFix-style lures...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Sophos Firewall v23 is now in early access
Sophos Firewall v23 brings many of your top-requested enhancements in one feature-packed release. From new AI-powered assistance and a modern REST...
Trump’s answer to AI’s image problem: Industry self-regulation and a new name
if ( !emtpy($headline_subheadline ) ) : ?> An executive order mandates a terminology shift across federal agencies, while a parallel...
Apple issues urgent iOS patch as it navigates the spyware arms race
if ( !emtpy($headline_subheadline ) ) : ?> A new zero-click flaw in CoreGraphics underscores the precarious nature of mobile endpoint...
How Israeli Checkpoints Choke Palestinian Life in the Occupied West Bank
After October 2023, delay times at checkpoints across Nablus spiked to levels beyond anywhere else in the West Bank. Commuters...
Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT
Attackers Abuse ChatGPT Custom GPTs to Deploy a Full-Featured RAT Pierluigi Paganini September 30, 2026 Threat actors abused fake ChatGPT...
U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Apple Multiple Products flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 30, 2026 U.S. Cybersecurity and...
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign Pierluigi Paganini September 30, 2026 Mandiant and GTIG detail...
Pentagon personnel database breach exposes personal data of millions
The US Department of Defense has confirmed a breach at one of its main repositories of personnel information, the Defense...
I Want Better Reporting on AI Genie Behavior
I Want Better Reporting on AI Genie Behavior AI systems are regularly completing tasks in ways that their prompters don’t...
Your guide to Google Messages’ new hidden gestures
if ( !emtpy($headline_subheadline ) ) : ?> Save time and manage messages faster with these recently revamped Google Messages gestures...
AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub...
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United...
Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances...
OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL...
