7 out-of-sight Googlebook highlights
if ( !emtpy($headline_subheadline ) ) : ?> Some of the Googlebook's most interesting features are the ones you barely hear...
AndyC
Andy Curtis is an award-winning security consultant, researcher and public speaker. He has been working in the computer security industry since the early 1990s, having been employed by state and federal government, leading healthcare and banking providers across three continents. He has given talks about computer security for some of the world’s largest companies, worked with law enforcement agencies on investigations into hacking groups, and is a regular voice on TV and radio explaining IT security threats.
URGENT – PHP Warns of Another Unpatched RCE Two Days After Emergency PHP2Shell Patches
Swati KhandelwalOct 23, 2026Vulnerability / Web Security PHP has warned of another way an attacker could run code on a...
Russian-Linked Hackers Used New Mesh Network Backdoor in Destructive Ukraine Attack
Ravie LakshmananOct 23, 2026Malware / Cyber Espionage The Russian state-sponsored hacking group Sandworm teamed up with another threat actor to...
Critical Flaw in Python’s Popular Pillow Image Library Allows Code Execution via a Crafted Image
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Pillow, the most widely used image library for Python, can be made to...
Researchers Demonstrate Node2Shell RCE Exploit on Node.js Build Using Crafted Brotli Data
Swati KhandelwalOct 23, 2026Vulnerability / Web Security Malicious Brotli data can make an application on an official build of Node.js...
Critical x402 SDK Flaw Could Let Malicious APIs Drain AI Agents’ Token Balances
AI agents paying for API calls with the x402 SDKs could sign a payment for their full balance of a supported token...
MythicRatatoskr: An Yggdrasil-enabled backdoor deployed in a UAC-0099-Sandworm collaboration
Executive summary This report analyzes activity during which UAC‑0099 gained initial access on July 16th, 2025 and handed it off...
Azul issues urgent Java security updates following eMudhra certificate compromise
Azul has issued an out-of-cycle security update after the compromise of eight eMudhra intermediate Certificate Authority (CA) certificates, publicly disclosed...
With a civilian excuse, China is collecting militarily useful weather data abroad
A global meteorological warning system has become an excuse for China to embed AI-feeding weather stations on foreign territory, gathering...
China’s infrastructure advantage could shape Southeast Asia’s AI choices
China is positioning itself to become a key provider of the infrastructure underpinning Southeast Asia’s AI ambitions. Chinese companies are...
.png "53% vs.19%: The budget divide separating AI leaders from everyone else")
53% vs.19%: The budget divide separating AI leaders from everyone else
IDC research reveals that organizations achieving the strongest AI and business outcomes invest nearly three times more of their IT...
Australia sanctions North Korean IT worker bosses and financiers
Key points Australia has sanctioned two North Korean individuals, Yu Pu Ung and Sim Hyon Sop, and two companies, Korea...
TikTok ads for fake stalkerware apps are scamming people who download them
Fake “stalkerware” apps promoted on TikTok are being used to lure would-be snoops into paying for services that do not...
ThreatLocker launches tool to control access and actions by AI agents
ThreatLocker has launched Zero Trust AI Control (ZTAIC), a product it says is designed to help organisations deploy so-called “agentic”...
Unified Defense from Endpoint to Cloud: Real-Time Protection with Cisco Security, Splunk, and SentinelOne
The Modern Runtime ChallengeCloud infrastructure no longer sits still. Containers spin up and disappear in seconds, microservices talk to each...
