New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Swati KhandelwalSep 22, 2026Vulnerability / Virtualization A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Swati KhandelwalSep 22, 2026Vulnerability / Web Security A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with...
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle...
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
Ravie LakshmananSep 22, 2026Malware / Cyber Espionage The threat actor known as SideCopy has been observed using spear-phishing lures to...
California joins US states clamping down on data center gold rush
if ( !emtpy($headline_subheadline ) ) : ?> At least 45 US data center projects worth an estimated $68 billion were...
In Pictures: iTnews’ latest Executive Retreat for Security Leaders
A selection of photos from the second iTnews Executive Retreat for Security Leaders at the Château Élan in the Hunter...
Protect the person, not just the network
We spend enormous amounts of money protecting the networks around our most important people. Then, at the end of the...
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
AI has moved quickly into the daily work of small and mid-size businesses (SMBs). Many have moved past chatbots and...
Bookshelf: An agenda for preventing the next world war
The international order established at the end of World War II provided a framework for the management of global affairs...
Gemini broke into 3 companies, but Google kept it quiet because ‘no damage was done’
if ( !emtpy($headline_subheadline ) ) : ?> An agentic cybersecurity incident in July impacted OpenAI, Google, Anthropic and Meta; everyone...
Security researcher says don’t install Meta’s Muse AI assistant
Key points Patrick Wardle has published proof-of-concept code for a zero-day, dubbed "not-a-mused", that can turn Meta's Muse AI assistant...
Beware DPRK job scams, ASD warns, but won’t confirm local impact
Key points ASD has joined Japan, Germany and the US in warning that North Korean actor WaterPlum, also known as...
CyberPath consultation proposes national model to assess cyber capability beyond certifications
A Department of Home Affairs-backed cyber workforce initiative is seeking feedback on a draft national framework that would shift how...
From Love Letters to AI Agents: Cybersecurity’s Evolution
Cybersecurity has never been a static discipline. Every era of technology introduces its own vulnerabilities, forcing organizations to rethink how...
Proofpoint Recognizes 2026 Global Partner Award Winners at Flagship Event
SUNNYVALE, Calif. and Proofpoint Protect 2026, SAN DIEGO – September 21, 2026 – Proofpoint, Inc., a global leader in human...
