$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a...
Vulnerability
Attackers Target Unpatched Roundcube Servers With CVE-2026-48842
Roundcube patched a high-severity vulnerability four months ago. Attackers are now targeting systems that still have not installed the fix....
Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras
A store in Auckland vibe-coded itself a new website. Within hours, its inventory had somehow expanded to include a pair...
Smashing Security podcast #485: These researchers got drunk to hack an LG TV
Researchers wanted to test if LG’s smart TVs come with any security risks – but their lawyers noticed a snag:...
Mathspace breach exposed data of more than 1 million students, parents and teachers
Mathspace, an online maths learning platform used in schools across Australia and New Zealand, said attackers breached its systems by...
Adobe Commerce and Magento Open Source vulnerability
The Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) is aware of reported active exploitation of a critical vulnerability...
Smashing Security podcast #483: This AI helps thieves steal your iPhone
You’ve had your iPhone stolen. A day later, you get a text from Apple saying they’ve found it, and a...
Smashing Security podcast #481: Never say this to a robot dog
At Black Hat this month, a group of security researchers took a $9,000 robot dog, plugged Google’s AI into its...
Quest Apartment Hotels confirms customer data breach linked to third-party vulnerability
Quest Apartment Hotels has confirmed a data breach involving customer information after unauthorised access was detected in a database system,...
Critical GitLab GraphQL Flaw Could Let Unauthenticated Attackers Delete Public Projects
Swati KhandelwalAug 17, 2026Vulnerability / DevOps GitLab has released security updates to address a critical vulnerability impacting its Community Edition...
Apple’s bug bounty program is drowning in so much AI slop, it is in danger of missing serious exploits
Apple has imposed strict new submission limits on its bug bounty portal after finding itself overwhelmed by low-quality, AI generated...
SAP Commerce Cloud CVE-2026-58231 Targeted in Exploitation Attempts Days After Patch
Ravie LakshmananAug 15, 2026Vulnerability / Cloud Security A maximum-severity security vulnerability impacting SAP Commerce Cloud is witnessing active exploitation efforts....
Zoom Zero-Click RCE: AI Helped Build an Exploit in Under 24 Hours
A critical Zoom vulnerability chain could have allowed an attacker to take control of another participant’s device simply by joining...
ShieldBreak Zero-Day PoC Claims Microsoft Defender Patch Bypass With SYSTEM Access
Ravie LakshmananAug 12, 2026Zero-Day / Vulnerability The security researcher going by the name Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and...
New Zapscape KVM Flaw Could Let Privileged L1 Guest Code Escape to Linux Hosts
Swati KhandelwalAug 06, 2026Virtualization Security / Linux Zapscape, a new Linux kernel vulnerability, could allow an attacker with kernel privileges...
