New Apple Phishing Scam Uses Fake $899 iPhone Purchase Alert
Image: akportfolio24/Envato One fake Apple alert is all it takes to send someone into a tailspin. A new phishing scam...
Security
Microsoft Patches Critical ASP.NET Core CVE-2026-40372 Privilege Escalation Bug
Ravie LakshmananApr 22, 2026Vulnerability / Cryptography Microsoft has released out-of-band updates to address a security vulnerability in ASP.NET Core that...
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container Escape
Ravie LakshmananApr 22, 2026Vulnerability / Container Security A critical security vulnerability has been disclosed in a Python-based sandbox called Terrarium...
ICE Uses Graphite Spyware
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
Two MDO field reports every IT security lead should read
The post Two MDO field reports every IT security lead should read appeared first on Blog. Tyler Swinehart, Director of...
Splunk Enterprise Security Unmasked Blog Recap
The post Splunk Enterprise Security Unmasked Blog Recap appeared first on Hurricane Labs. *** This is a Security Bloggers Network...
22 BRIDGE:BREAK Flaws Expose Thousands of Lantronix and Silex Serial-to-IP Converters
Ravie LakshmananApr 21, 2026Network Security / Vulnerability Cybersecurity researchers have identified 22 new vulnerabilities in popular models of serial-to-IP converters...
5 Places where Mature SOCs Keep MTTR Fast and Others Waste Time
Security teams often present MTTR as an internal KPI. Leadership sees it differently: every hour a threat dwells inside the...
NGate Campaign Targets Brazil, Trojanizes HandyPay to Steal NFC Data and PINs
Ravie LakshmananApr 21, 2026Mobile Security / Artificial Intelligence Cybersecurity researchers have discovered a new iteration of an Android malware family...
Mexican Surveillance Company
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
CISA Adds 8 Exploited Flaws to KEV, Sets April-May 2026 Federal Deadlines
Ravie LakshmananApr 21, 2026Network Security / Threat Intelligence The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added eight...
SGLang CVE-2026-5760 (CVSS 9.8) Enables RCE via Malicious GGUF Model Files
Ravie LakshmananApr 20, 2026Open Source / Server Security A critical security vulnerability has been disclosed in SGLang that, if successfully...
This VPN Lets You Verify Your Business Privacy For $130
Image: StackCommerce TL;DR: This VP.NET VPN 3-Year Subscription is on sale for $129.99 (reg. $199.95), giving IT and business users...
Amtrak Data Breach Exposes 2.1M Records, Reports Suggest Larger Leak
Image: Lennart Rudolph (Unsplash) Booking a train ticket shouldn’t come with a side of data exposure, but that’s the situation...
The MCP Disclosure Is the AI Era’s ‘Open Redirect’ Moment
Image: peshkova/Adobe Enterprise AI just hit its “open secret” moment, where the architecture everyone trusted turns out to be the...
