An Undercover Google Analyst Infiltrated a Notorious Supply-Chain Hacking Gang
TeamPCP pulled off the worst-ever software supply-chain hacking spree and breached thousands of companies. Now Google’s threat intelligence group has...
Blog
Gyazo Data Breach Exposes 23 Million User Records
Gyazo Data Breach Exposes 23 Million User Records Pierluigi Paganini September 18, 2026 A Gyazo breach exposed 23 million user...
Microsoft mops up after Patch Tuesday broke logins, audio, Excel
if ( !emtpy($headline_subheadline ) ) : ?> Patch early and often, but not too early or you'll be doing it...
GhostCode attackers abuse device codes to take over Microsoft 365 accounts
if ( !emtpy($headline_subheadline ) ) : ?> A new phishing kit abuses a legitimate Microsoft device authorization flow to steal...
With Siri Recap, Apple threw a punch at OpenAI no one saw coming
if ( !emtpy($headline_subheadline ) ) : ?> If it manages to force regulation to define appropriate use of ambient AI,...
New WordPress Click2Shell Flaw Forces Theme Installs, Can Chain to Code Execution
Swati KhandelwalSep 18, 2026Vulnerability / Web Security WordPress today released patches to fix a new set of vulnerabilities in its...
Transparent Tribe Deploys New Rust Backdoor Using Private GitHub Repositories for C2
Ravie LakshmananSep 18, 2026Malware / Cyber Espionage The Pakistan-aligned threat group tracked as Transparent Tribe (aka APT36 and Earth Karkaddan)...
Microsoft Patches CVSS 10.0 Azure AI Foundry Flaw Enabling Unauthorized Privilege Escalation
Ravie LakshmananSep 18, 2026Vulnerability / Cloud Security Microsoft has released fixes for a maximum-severity security flaw in Azure AI Foundry...
An Abandoned CDN Domain Was Re-Registered. Thousands of Sites Still Call It.
In July 2025, someone registered a domain that used to belong to a content delivery network. The CDN had been...
Plugin4Shell Lets Repository Owners Swap Pinned Plugin Code Across Four AI Coding Agents
A flaw in four widely used AI coding agents lets someone who controls a plugin's code repository swap the plugin...
Google Opens Google Home to Claude and Other AI Agents — Here’s What They Can Control
The smart home is becoming another place where AI agents can act, not just answer questions. Google began rolling out...
Meta’s Copyright System Is Being Weaponized Against Albanian Protesters
After three months of daily anti-government protests—dubbed the Flamingo Revolution—the sudden mass suspension of Instagram accounts has led to fears...
RatHat Turns Android Accessibility Into an Attack Weapon
RatHat Turns Android Accessibility Into an Attack Weapon Pierluigi Paganini September 18, 2026 RatHat combines AI-driven screen control, Android debugging...
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution
Check Point Fixes Critical CVE-2026-91843 Allowing Root Code Execution Pierluigi Paganini September 18, 2026 Check Point fixed CVE-2026-91843, a critical...
Are AIs Still Struggling with CAPTCHAs?
Are AIs Still Struggling with CAPTCHAs? Anthropic’s recent security-incident document contains a bit about how CAPTCHAs are still frustrating Claude....