US says Chinese hackers broke into Justice Department, NASA, Federal Reserve, Senate
The United States said it had disrupted a Chinese hacking operation responsible for break-ins and attempts on the US Justice...
Blog
Woolworths lifts the covers on internal AI
Key points Woolworths has revealed it uses an AI tool called Team Assist to field 7000 employee inquiries per week,...
FBI Disrupts Chinese Proxy Tools Used in Mass Hacking of US Agencies and Infrastructure
For years, China's military and intelligence agencies, which carry out hacking campaigns against targets around the globe, have grown increasingly...
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure
FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure Pierluigi Paganini August 26, 2026 FBI seizes QScan...
Spyware for Babies
Spyware for Babies The New York Times has a long article (alt link) on surveillance systems aimed at babies. They...
FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations
The U.S. Department of Justice (DoJ) on Wednesday announced the disruption of two hacking platforms named QScan and QTRouter operated...
Nimbus Manticore Expands Toolset With TWOSTROKE-Like Backdoor and SSH Tunneler
Ravie LakshmananAug 26, 2026Malware / Cyber Espionage Cybersecurity researchers have discovered additional infrastructure and previously undocumented malware associated with Nimbus...
NovaCookies Campaigns Abuse Genuine Docusign Notifications to Steal Microsoft 365 Sessions
Cybersecurity researchers have disclosed details of a new adversary-in-the-middle (AitM) phishing toolkit called NovaCookies that's used as a proxy to...
CISA Red Team Compromised Two Critical Infrastructure Orgs, One Detected Nothing
Swati KhandelwalAug 26, 2026Red Teaming / Security Operations The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has published the results...
Unpatched Kaltura mwEmbed Flaws Could Let Remote Attackers Read Files and Run Code
The CERT Coordination Center (CERT/CC) has disclosed two unpatched vulnerabilities in Kaltura's HTML5 video player library that allow a remote,...
WhatsApp Just Added 3 New Ways to Protect Your Account
WhatsApp is adding three new security features designed to make account takeovers and scam calls harder to pull off. The...
The Password Notebook Is Back — but Is It Actually Safer?
The password notebook is making an unlikely comeback, and this time security professionals have more reason to take the idea...
TikTok Agrees to $400M Settlement Over Children’s Privacy
TikTok’s long-running fight with the US government over children’s data now carries a price tag of up to $400 million....
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 26, 2026 U.S. Cybersecurity and Infrastructure...
88 ID Verification Breaches Show the Cost of Collecting Identity Data
88 ID Verification Breaches Show the Cost of Collecting Identity Data Pierluigi Paganini August 26, 2026 88 ID-verification breaches exposed...