Smashing Security podcast #470: This AI security flaw might be impossible to fix
A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers...
been
Smashing Security podcast #470: This AI security flaw might be impossible to fix
A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers...
Smashing Security podcast #470: This AI security flaw might be impossible to fix
A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers...
Smashing Security podcast #470: This AI security flaw might be impossible to fix
A website called “UK visa portal” has been quietly collecting passport scans, selfies, and personal data from thousands of travellers...
Apple’s 2026 Security Events: iPhone Exploits, Zero-Days Put Millions at Risk
Apple’s security year so far has been anything but quiet. The company’s 2026 security cycle has been dominated by a...
Welcoming the Philippine Government to Have I Been Pwned
03 June 2026 Today, we welcome the 46th government onboarded to Have I Been Pwned’s free gov service: the Philippines.The...
China-Aligned Groups Ramp Up Attacks: Dragon Weave Hits Czech Republic & Taiwan
A new cyber espionage campaign codenamed Operation Dragon Weave has been observed targeting officials and citizens in the Czech Republic...
Gartner EPP MQ-17
Sophos has been named a Leader in the 2026 Gartner® Magic Quadrant™ for Endpoint Protection. This marks the 17th consecutive...
Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026-39987 Exploit
Ravie LakshmananMay 29, 2026Vulnerability / Artificial Intelligence An unknown threat actor has been observed using a large language model (LLM)...
Kimsuky Deploys HTTPSpy, Expands Arsenal with HelloDoor and VS Code Tunnels
The North Korean state-sponsored threat actor known as Kimsuky (aka Velvet Chollima) has been attributed to a fresh set of...
Critical Gogs RCE Vulnerability Lets Any Authenticated User Execute Arbitrary Code
Ravie LakshmananMay 28, 2026Vulnerability / Open Source A critical security vulnerability has been disclosed in Gogs, a popular open-source self-hosted...
MuddyWater Uses DLL Side-Loading in Espionage Campaign Targeting 9 Countries
The Iranian hacking group known as MuddyWater has been linked to a new campaign affecting at least nine organizations across...
Welcoming the Bahamian Government to Have I Been Pwned
14 May 2026 Today, we welcome the 44th government onboarded to Have I Been Pwned’s free gov service: The Bahamas....
Welcoming the Bangladesh Government to Have I Been Pwned
12 May 2026 Today, we welcome the 43rd government onboarded to Have I Been Pwned's free gov service, Bangladesh. The...
Welcoming the Costa Rican Government to Have I Been Pwned
11 May 2026 Today, we welcome the 42nd government onboarded to Have I Been Pwned’s free gov service: Costa Rica.The...
