Attackers hijack ccTLDs to fake certs for Google
Key points Unknown attackers hijacked the ccTLD registries for Ghana, Sierra Leone and American Samoa to obtain unauthorised HTTPS certificates...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
Critical Atlassian vulnerability affects Jira, Confluence and other products
Rapid7 has published an Emergent Threat Response (ETR) alert for a critical vulnerability, tracked as CVE-2026-21589, affecting eight Atlassian products...
New email attacks target both humans and AI in the same message
Recent phishing attacks analysed by Barracuda Research found attackers combining two sets of tactics in a single email: social engineering...
Australia is building green industries. Defence could make them strategic
Australia is spending billions to build green industries while Defence is trying to make the Australian Defence Force harder to...
Kiteworks and A-LIGN extend partnership to support IRAP-aligned assessments in Australia
Kiteworks and compliance assessment firm A-LIGN have extended their partnership to target Australian government agencies and regulated enterprises seeking IRAP-aligned...
C4X Technology Architects supports Genea Biomedx with technology transformation
Highly Commended project in the Techpartner.news Impact Awards. Hear from Leo Raikhman, director and co-founder at C4X Technology Architects. (more…)
When everyone is an ‘analyst’, expertise loses meaning
Australia has developed a growing class of self-declared geopolitical analysts and independent researchers who built their reputations not through research,...
California Enacts New Law Governing Online Services Accessed by Children
On September 10, 2026, California’s governor signed AB 2246, a bill that repeals and replaces the California Age-Appropriate Design Code...
FTC to Launch New Study on Personalized Pricing
Federal Trade Commission Chairman Andrew Ferguson recently announced plans for a new study of personalized pricing under Section 6(b) of...
Shaq Got Hacked. Now He’s Pitching for a VPN
At a recent event for security firm NordVPN, NBA superstar Shaquille O’Neal revealed that he got hacked—and warned the public...
Smashing Security podcast #487: Clippy’s crypto comeback
Microsoft’s Twitter account, with its 13 million followers, was hijacked by a paperclip. There was no ransomware or data theft,...
Attackers Hijack .gh, .sl, and .as Registries to Obtain Certificates for Google Domains
Attackers compromised three country-code top-level domains (ccTLDs) and obtained unauthorized HTTPS certificates for several Google domains, Google said on October 6....
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Ravie LakshmananOct 07, 2026Supply Chain / Malware Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign...
SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances
Swati KhandelwalOct 07, 2026Vulnerability / Network Security SonicWall has released hotfixes for four flaws in its SMA1000 appliances, the gateways...
Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely
Swati KhandelwalOct 07, 2026Vulnerability / Artificial Intelligence A critical vulnerability in LMCache, open-source software that speeds up large language model...
