Looking for free Robux? Here’s what’s real, and what’s a scam
Kids Online Fake giveaways, free Robux generators and lookalike login pages all target the same thing – your Roblox account...
Blog
EvilTokens made phishing-as-a-service look easy. Then it got taken down
EvilTokens made phishing-as-a-service look easy. Then it got taken down Pierluigi Paganini September 23, 2026 Microsoft, Coinbase and law enforcement...
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools
Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools Pierluigi Paganini September 23, 2026 Attackers spoofed...
CVE-2026-87902: how close is your WordPress to remote code execution?
CVE-2026-87902: how close is your WordPress to remote code execution? Pierluigi Paganini September 23, 2026 WordPress 7.1.2 fixes an unauthenticated...
Research on Models Engaging in Genie-Like Behavior
Research on Models Engaging in Genie-Like Behavior New paper: “Self-Jailbreaking: Language Models Can Reason Themselves Out of Safety Alignment After...
Hello, Googlebook: The complete FAQ on Google’s Android-ChromeOS combo
if ( !emtpy($headline_subheadline ) ) : ?> Android and ChromeOS are coming together in a wild new way with Google's...
F5 Patches Critical BIG-IP APM Zero-Day Exploited for Unauthenticated RCE on OAuth Servers
Swati KhandelwalSep 23, 2026Vulnerability / Network Security Attackers are exploiting a critical flaw in F5 BIG-IP Access Policy Manager (APM)...
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
Ravie LakshmananSep 23, 2026Zero-Day / Vulnerability A Chinese threat actor codenamed UTA0565 has been observed exploiting the recently disclosed Google...
Critical Next.js ImageResponse Flaw Can Lead to Server Code Execution via Crafted SVG Input
Swati KhandelwalSep 23, 2026Vulnerability / Web Security A new security vulnerability in Next.js could allow attackers to run code on...
ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants
Ravie LakshmananSep 23, 2026Data Breach / Cybercrime The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached...
Forgot Your Android PIN? Google Is Testing a New Recovery Option
Forgetting your Android PIN can leave you with one particularly painful option: erase the phone and start over. Google may...
Chinese twin-track diplomacy is building influence in the Middle East
China is seeking to exploit perceived Western missteps in the Middle East, including the Iran war, by turning societies against...
Weekly Update 522: Live From Oslo with Scott Helme
23 September 2026 Heads up: the first 7 mins is a bit quiet until we worked out the external mic...
ATO culture keeps a cap on agentic AI ambitions
Key points The ATO believes agentic AI might only be needed for a small portion of an end-to-end process, with...
Cloudflare, Microsoft dismantle AI-powered MFA phishing ring targeting Australia
Cloudflare and Microsoft say they have taken part in a coordinated effort with law enforcement partners to disrupt “EvilTokens”, a...