Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
Ravie LakshmananSep 16, 2026Vulnerability / Web Security A critical security flaw in Issabel Framework, a web-based framework for the open-source...
Blog
Three Threat Groups Target Russian Enterprises With Backdoors, Ransomware, and Wipers
Enterprises in Russia have emerged as the target of three threat activity clusters tracked as NightEagle, Hacking Cat, and Toy...
One Extension Could Hijack AI Assistants Across Chrome, Comet, Edge, Opera Neon and Claude
Security researchers at Forever Security have shown that one ordinary browser extension could take control of the AI assistants built into five...
Attacker Hijacks AI Coding Assistant Session, Spreads Shai-Hulud Across About 100 Repositories
Swati KhandelwalSep 16, 2026Artificial Intelligence / Software Security Mandiant says an attacker hijacked an active AI coding-assistant session at an...
Parallels Desktop Flaw Lets Non-Admin Mac Users Gain Root, but Intel Macs Can’t Install Fix
Parallels Desktop for Mac has a flaw that lets an ordinary local account run code as root, the highest level...
Apple Adds New Parental Controls to iPhone, iPad and Mac: Here’s What Changes
Apple is giving parents more control over what their children can access — and making kids ask before crossing some...
Microsoft Issues Out-of-Band Windows Update After September Patch Breaks Remote Desktop, Hyper-V
Microsoft has released an out-of-band Windows update after its September security patch caused problems with Remote Desktop, Linux virtual machines,...
Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works
A hacker collective pulled down a Flock camera and dumped its data. The files included thousands of videos and logs...
Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen
Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen Pierluigi Paganini September 16, 2026 CenterPoint Energy...
Fake CAPTCHA Scams
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
Here’s why Microsoft supports open-source Chinese AI
if ( !emtpy($headline_subheadline ) ) : ?> It has less to do with virtuous thinking than with profit-making. endif; ?>...
5 efficiency-enhancing Chrome extensions worth trying on Android
if ( !emtpy($headline_subheadline ) ) : ?> With the right setup, you can now use Chrome extensions on Android —...
Google Patches Pixel Modem Flaw Amid Signs of Limited Targeted Exploitation
Ravie LakshmananSep 16, 2026Vulnerability / Mobile Security Google has disclosed that a high-severity security flaw in its Pixel Cellular Modem...
Threat Intelligence Alone Won’t Close the Exploitation Gap
The Hacker NewsSep 16, 2026Threat Intelligence / Security Validation A leaked credential shows up in a criminal marketplace, or a...
Acronis cPanel Backup Plugin Vulnerability Exploited in Targeted Attacks
Ravie LakshmananSep 16, 2026Vulnerability / Linux Acronis has warned that a high-severity security flaw in its Backup plugin for cPanel...