Beware these fake websites selling subscriptions to AI assistants
if ( !emtpy($headline_subheadline ) ) : ?> Over 100 websites abusing legitimate Google sign-in processes are ripping off customers who...
Blog
A New Tool Found Malware That’s Guided by an AI Hive Mind—No Humans in Sight
Cisco Talos researchers created a new framework for identifying malware and hacking tools that rely on AI chatbots—and quickly discovered...
How to Use AI With Your Privacy Intact
Your conversations with AI chatbots are both highly personal and deeply vulnerable to surveillance. Here’s how you can protect yourself.Photo-Illustration:...
Public PoC Exposes Critical Veeam Agent Privilege Escalation
Public PoC Exposes Critical Veeam Agent Privilege Escalation Pierluigi Paganini September 22, 2026 A Veeam Agent flaw lets local users...
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Zyxel flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 22, 2026 U.S. Cybersecurity and Infrastructure...
Contagious Interview: 30,000 devices infected by a fake job interview
Contagious Interview: 30,000 devices infected by a fake job interview Pierluigi Paganini September 22, 2026 North Korea-linked WaterPlum runs the...
GPT-6 Astra Breaks an Old Enigma Message
GPT-6 Astra Breaks an Old Enigma Message This is pretty amazing: However, the most astonishing thing about this break is...
DORA Year Two: Can Your SOC Actually See the Attack?
When the Digital Operational Resilience Act (DORA) became enforceable across the European Union in January 2025, it triggered an administrative...
New Linux Kernel Flaw Gives ARM64 KVM Guests Read-Write Access to Host Memory
Swati KhandelwalSep 22, 2026Vulnerability / Virtualization A new flaw in the Linux kernel's KVM virtualization code for ARM64 processors can...
SharePoint Flaw Initially Listed as Spoofing by Microsoft Enables Authenticated RCE
Swati KhandelwalSep 22, 2026Vulnerability / Web Security A SharePoint Server vulnerability that Microsoft initially classified as a spoofing flaw with...
Malicious npm Package indexed-btree Hid Its Loader in Runtime Code Before Removal
A malicious npm package named "indexed-btree" has been observed hiding its malicious behavior within application code rather than using lifecycle...
SideCopy Broadens India Targeting to Academia With ReverseRAT Spear-Phishing
Ravie LakshmananSep 22, 2026Malware / Cyber Espionage The threat actor known as SideCopy has been observed using spear-phishing lures to...
California joins US states clamping down on data center gold rush
if ( !emtpy($headline_subheadline ) ) : ?> At least 45 US data center projects worth an estimated $68 billion were...
In Pictures: iTnews’ latest Executive Retreat for Security Leaders
A selection of photos from the second iTnews Executive Retreat for Security Leaders at the Château Élan in the Hunter...
Protect the person, not just the network
We spend enormous amounts of money protecting the networks around our most important people. Then, at the end of the...