Malware Can Abuse Windows Hello for Business Keys for Persistent Entra ID Access
Swati KhandelwalAug 07, 2026Endpoint Security / Vulnerability Entra ID researcher Dirk-jan Mollema demonstrated that malware already running in a signed-in...
Security
ICE Is Buying Access to Credit Card Records
About Bruce SchneierI am a public-interest technologist, working at the intersection of security, technology, and people. I've been writing about...
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Swati KhandelwalAug 06, 2026Virtualization Security / Linux Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges...
Cisco Patches 12 SD-WAN and IOS XE Flaws, Including Three 9.8 CVSS Score Bugs
Ravie LakshmananAug 06, 2026Network Security / Vulnerability Cisco has rolled out updates to address multiple critical security vulnerabilities impacting Catalyst...
Over 4,400 Rockwell PLCs Exposed Online, 22 Found in Water Attack Cities
Swati KhandelwalAug 06, 2026OT Security / Vulnerability Forescout found 22 internet-facing Rockwell Automation programmable logic controllers (PLCs) in cities hit...
Apple iCloud Private Relay Can Expose Real IPs Through WebKit Proxy Bypasses
Ravie LakshmananAug 06, 2026Vulnerability / Network Security Cybersecurity researchers have disclosed a security issue with Apple's iCloud Private Relay tool...
Apple Photos Privacy Case Advances, With Up to $32.5 Billion Alleged Exposure
Court clears path for multibillion-dollar Apple biometric privacy lawsuit. The iPhone maker is facing a potential $32.5 billion class-action lawsuit...
Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access
Swati KhandelwalAug 06, 2026Database Security / Endpoint Security Attackers broke into an organization's Oracle database through a SQL injection flaw...
AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model
Security flaws in agent infrastructure from Amazon Web Services (AWS), Google, and Vercel let untrusted or forged instructions reach an...
Chinese-Made Zbtlink Routers Ship With Backdoor That Opens Unauthenticated Root Shells
Ravie LakshmananAug 06, 2026IoT Security / Malware Cybersecurity researchers have disclosed details of a "factory-shipped backdoor" implanted in at least...
CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild
Ravie LakshmananAug 06, 2026Vulnerability / Enterprise Security A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come...
Apple Briefly Removes Telegram From App Store Over Reported CSAM Violation
Telegram briefly disappeared from Apple’s App Store after a child sexual abuse material violation, showing how quickly a moderation failure...
Apple Challenges UK Demand For Access To Encrypted iCloud Data
Apple’s encryption dispute with the U.K. government is heading back into a legal forum. The company has challenged the U.K....
Apple Seeks Injunction as OpenAI Blames Tech Giant for Security Lapses
Over the last 48 hours, the partnership between the world’s most valuable smartphone maker and the king of generative AI...
WhatsApp Users Say They’re Being Locked Out of Accounts by Mistake
WhatsApp’s effort to stop bad actors briefly swept up legitimate users, triggering unexplained account suspensions that the company now admits...
