Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in...
Swati
Claude Code and Gemini CLI Flaws Let a GitHub Issue Reach CI Workflow Secrets
Swati KhandelwalAug 07, 2026Artificial Intelligence / Vulnerability A GitHub issue opened by an account with no repository privileges was enough...
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Swati KhandelwalAug 06, 2026Virtualization Security / Linux Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Swati KhandelwalAug 06, 2026OT Security / Vulnerability Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit...
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Swati KhandelwalAug 06, 2026Database Security / Endpoint Security Attackers broke into an organization's Oracle database through a SQL injection flaw...
Ransom Cartel Creator Gets 16 Years in Prison for Operating Ransomware-as-a-Service
Swati KhandelwalAug 06, 2026Ransomware / Cybercrime A federal judge in Alexandria, Virginia, sentenced Maksim Silnikau to 16 years in prison...
Critical Gitea Flaw Let Unauthenticated Attackers Read Server Files via Org-Mode Markup
Swati KhandelwalAug 05, 2026Vulnerability / DevOps An unauthenticated attacker can read any file the service account can access on Gitea,...
Google Deletes 3 ADK AI Workflows After Malicious GitHub Issue Could Trigger Privileged Agent
Swati KhandelwalAug 04, 2026AI Security / DevSecOps Google deleted three AI agent workflows from its Agent Development Kit (ADK) Python...
New cPanel Critical Flaw Could Let Hosting Customers Run SQL as Database Root
Swati KhandelwalAug 04, 2026Vulnerability / Database Security cPanel has patched a flaw that let an authenticated hosting customer execute SQL...
PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web
Swati KhandelwalAug 03, 2026Data Breach / Dark Web The Police National Legal Database (PNLD) has confirmed that police, government and...
Thermo Fisher Patches Flaw That Could Make DNA File Tampering Nearly Undetectable
Swati KhandelwalAug 03, 2026Data Security / Vulnerability Thermo Fisher Scientific has patched a flaw in select Applied Biosystems human identification...
N-able Says Attackers Take Over N-central Servers After Initial Fix Proves Incomplete
Swati KhandelwalAug 03, 2026Vulnerability / Endpoint Security N-able said attackers exploited an authentication bypass in N-central to gain remote administrative...
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
Swati KhandelwalAug 01, 2026Vulnerability / Threat Intelligence An attacker drained 1,196 Bitcoin addresses in 41 minutes on July 30, taking...
Hackers Poison Adform Script to Swap Crypto Wallet Addresses Across Customer Sites
Swati KhandelwalAug 01, 2026Web Security / Supply Chain Attack Attackers modified a JavaScript file served by advertising technology company Adform,...
Hijacked Hotel Wi-Fi Pushes Fake Updates to Deliver Surveillance Malware
Swati KhandelwalAug 01, 2026Malware / Cyber Espionage A fake browser update served over hijacked hotel Wi-Fi has been used to...