News
Plain-English guides on web security, compliance, and keeping your clients protected.
Security researchers at runZero have disclosed seven vulnerabilities in FatFs, a compact filesystem library widely embedded in firmware for devices that read and write FAT and exFAT media. The softwar...
Read article →A newly disclosed Linux kernel vulnerability dubbed Bad Epoll could allow a local, unprivileged user to gain root access on affected systems, according to a public research write-up. The flaw is track...
Read article →Security researchers have identified a previously undocumented modular malware framework called Avalon that appears designed to support a full intrusion lifecycle, from initial access and credential t...
Read article →Researchers have uncovered a new software supply chain operation involving malicious npm packages that imitate legitimate Rollup polyfill tooling and appear to be tied to North Korean threat actors. T...
Read article →Researchers have linked a previously unreported threat group, known as Armored Likho, to cyberattacks against government agencies and electric power organizations in Russia, Brazil, and Kazakhstan. Se...
Read article →The Citizen Lab has reported that Stelios Kouloglou, a former member of the European Parliament, was repeatedly targeted with Pegasus spyware while he was serving on a committee examining the misuse o...
Read article →AdaptHealth has disclosed that attackers used social engineering to break into its cloud environment through a third-party contractor, exposing sensitive patient information and credentials tied to in...
Read article →Google says it has worked with US law enforcement and several security partners to reduce the reach of NetNut, a residential proxy service that researchers believe was built on a botnet of more than 2...
Read article →Security researchers have identified a new macOS infostealer, dubbed PamStealer, that uses a fake website, a staged AppleScript dropper, and local password verification to quietly compromise Mac users...
Read article →Two new large language models from Chinese companies are drawing attention for their strong performance against widely used U.S. mainstream and frontier systems. The releases add another sign that the...
Read article →A former systems administrator has shared a classic example of how technical error messages can be misread in surprising ways.The reader, identified as “Lee,” said the incident took place around the y...
Read article →A software developer says Google Cloud flagged his account as compromised, suspended it for suspected abuse, and then left him with more than $11,000 in charges tied largely to Gemini image-generation...
Read article →