Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign
Ravie LakshmananFeb 05, 2026Web Security / Vulnerability Cybersecurity researchers have disclosed details of an active web traffic hijacking campaign that...
Security
CVE-2025-22225 in VMware ESXi now used in active ransomware attacks
CVE-2025-22225 in VMware ESXi now used in active ransomware attacks Pierluigi Paganini February 04, 2026 Ransomware groups now exploit VMware...
Taiwanese operator of Incognito Market sentenced to 30 years over $105M darknet drug ring
Taiwanese operator of Incognito Market sentenced to 30 years over $105M darknet drug ring Pierluigi Paganini February 04, 2026 A...
The ‘Absolute Nightmare’ in Your DMs: OpenClaw Marries Extreme Utility with ‘Unacceptable’ Risk
It is the artificial intelligence (AI) assistant that users love and security experts fear.OpenClaw, the agentic AI platform created by...
GreyNoise tracks massive Citrix Gateway recon using 63K+ residential proxies and AWS
GreyNoise tracks massive Citrix Gateway recon using 63K+ residential proxies and AWS Pierluigi Paganini February 04, 2026 GreyNoise spotted a...
Windows Shutdown Bug Spreads to Windows 10, Microsoft Confirms
Image: Clint Patterson/Unsplash You’d think “turning it off and on again” would be the solution to a computer glitch. But...
Why Moltbook Changes the Enterprise Security Conversation
For several years, enterprise security teams have concentrated on a well-established range of risks, including users clicking potentially harmful links,...
Microsoft: Info-Stealing malware expands from Windows to macOS
Microsoft: Info-Stealing malware expands from Windows to macOS Pierluigi Paganini February 04, 2026 Microsoft warns info-stealing attacks are expanding from...
Orchid Security Introduces Continuous Identity Observability for Enterprise Applications
The Hacker NewsFeb 04, 2026Identity Security / Security Operations An innovative approach to discovering, analyzing, and governing identity usage beyond...
Eclipse Foundation Mandates Pre-Publish Security Checks for Open VSX Extensions
Ravie LakshmananFeb 04, 2026Supply Chain Security / Secure Coding The Eclipse Foundation, which maintains the Open VSX Registry, has announced...
CISA Adds Actively Exploited SolarWinds Web Help Desk RCE to KEV Catalog
Ravie LakshmananFeb 04, 2026Software Security / Vulnerability The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a critical...
Alert Fatigue: Why SOCs Are Fighting the Wrong Battle
The “alert fatigue” crisis plaguing Security Operations Centers (SOCs) isn’t really about volume. It’s about fighting adversarial systems with tools...
Chrome Add-On Caught Stealing Amazon Commissions
image: envato by Image-Source A Chrome browser extension advertised as a way to hide sponsored ads on Amazon has been...
U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini February...
Security Researchers Breach Moltbook in Record Time
Security researchers from cloud cybersecurity firm Wiz disclosed a critical vulnerability in Moltbook, a newly launched social network designed for...
