Your Cloud Security Checklist Doesn’t Work the Way You Think It Does
If managing security across multiple cloud providers wasn't hard enough, each one fails in a different way. For the 2026...
Blog
Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts
Ravie LakshmananSep 07, 2026Malware / Vulnerability Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute...
Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released
A TantoSec proof-of-concept turns an AES-CBC "padding oracle" in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution —...
Sam Altman calls GPT-6 Astra rollout ‘messy’ as enterprise users wait for access
Only the organizations enrolled in its Daybreak cybersecurity program were able to access the model, whereas Plus, Pro, Business, and...
JSCeal Hides Crypto Malware in V8 Bytecode
JSCeal Hides Crypto Malware in V8 Bytecode Pierluigi Paganini September 07, 2026 JSCeal hides crypto-stealing malware in V8 bytecode, but...
Why AI Agent Sandboxes Are Failing Security Tests
Why AI Agent Sandboxes Are Failing Security Tests Pierluigi Paganini September 07, 2026 Autonomous AI agents escaped a sandbox and...
Berlin Ransomware Leak Exposes State Secrets
Berlin Ransomware Leak Exposes State Secrets Pierluigi Paganini September 07, 2026 Berlin refused a 30 Bitcoin ransom, leading hackers to...
How a hole in Lenovo’s login system let hackers walk into 5,000 Dropbox accounts
If you ever linked your Dropbox account to a Lenovo ID - perhaps to make life easier when logging in...
Automobile Camouflage to Hide from Flock Cameras
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
16 Gmail power moves for more efficient inbox management
Gmail’s attachment tiles are a great way to jump directly to attachments without having to open an email. Creating new...
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthenticated RCE Flaw
Every on-premises N-central build below 2026.3.1.14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4....
JSCeal Malware Can Bypass Google Authentication Using Stolen Session Cookies
Cybersecurity researchers have unpacked JSCeal, a sophisticated compiled V8 JavaScript (JSC) malware with credential harvesting, surveillance, and traffic-interception capabilities. "The...
Dissecting a PHP web server rootkit
SophosLabs recently acquired a Linux implant associated with compromised BIG-IP Access Policy Management (APM) environments that use Apache and PHP...
iTnews Executive Retreat – Security Leaders Edition – VIC
Security leaders operate in one of the most demanding roles in technology. Between navigating an evolving threat landscape, managing organisational...
UN Resolution 2758: when interpretation becomes institutional power
At the Pacific Islands Forum in Palau last week, Australian Prime Minister Anthony Albanese was asked whether it was appropriate...