Smashing Security podcast #476: Remote-control rickshaws and rogue book marketers
An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks...
Blog
Smashing Security podcast #476: Remote-control rickshaws and rogue book marketers
An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks...
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Swati KhandelwalJul 17, 2026Vulnerability / Web Security An anonymous HTTP request can run code on a WordPress site. The bug...
OpenSSL HollowByte Flaw Could Freeze Server Memory with 11-Byte TLS Requests
Eleven bytes will make an unpatched OpenSSL server set aside up to 131 KB of memory for a message that...
Seven Malicious Vite npm Packages Use Blockchain C2 to Deliver a RAT
Ravie LakshmananJul 17, 2026Software Supply Chain / Malware Cybersecurity researchers have discovered a cluster of seven malicious npm packages targeting...
OAuth Client ID Spoofing Lets Attackers Validate Stolen Microsoft Entra Credentials
At least two distinct threat actors are weaponizing a novel evasion technique called OAuth client ID spoofing in cloud campaigns,...
Suspected Chinese snoops caught breaking into universities’ Roundcube mailservers
Security Proofpoint researcher tells The Reg: 'We estimate the total volume of targets would be a few dozen' Suspected Chinese...
23andMe Agrees to $18M Settlement With 43 States Over 2023 Data Breach
An $18 million settlement is the latest consequence of 23andMe’s 2023 data breach—and a reminder that some stolen information can...
Microsoft’s ‘Project Perception’ Could Challenge Anthropic’s Mythos in AI Security
Microsoft is reportedly preparing a new security product, called Project Perception, that would work similarly to Anthropic’s Mythos, deployed within...
Critical Zoom Flaw Could Let Attackers Take Over Windows Accounts
A critical flaw in Zoom’s Windows software could allow an unauthenticated attacker to remotely take over an account, giving organizations...
New FCC Proposal Pits Phone Privacy Against Fraud Prevention
The days of buying an anonymous burner phone in the U.S. could be numbered. The Federal Communications Commission has proposed...
Smashing Security podcast #476: Remote-control rickshaws and rogue book marketers
An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks...
Smashing Security podcast #476: Remote-control rickshaws and rogue book marketers
An app has appeared in India that lets anyone with a smartphone stop a passing e-rickshaw dead in its tracks...