If you’re a parent and haven’t been in touch with gaming for a while, you’d be surprised at how much it has changed. Gaming is no longer the single-user experience that you may remember from the 1990s or the early… Read More "Staying safe while gaming: how to ensure your children don’t become victims of financial fraud"
A security audit of 2,857 skills on ClawHub has found 341 malicious skills across multiple campaigns, according to new findings from Koi Security, exposing users to new supply chain risks. ClawHub is a marketplace designed to make it easy for… Read More "Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users"
Responsible disclosure is built on an assumption that “doing the right thing” will be met with timely action, fair treatment, and professional respect, if not a bounty award. Increasingly, that assumption is failing. And when it does, organizations alienate researchers… Read More "When responsible disclosure becomes unpaid labor"
Third-party vendors are an important source of strategic advantage, cost savings and expertise. Yet outsourcing is not without cybersecurity risk. As organizations’ reliance on third parties grow, so too does their exposure to third-party risk and fourth-party risk. A HSB… Read More "How to Automate Vendor Risk Management in 2026"
Crypto Mining Crypto mining is the process by which individuals or organizations use computer power to solve complex mathematical problems, validating transactions on a blockchain network and earning cryptocurrency coins. This activity has gained popularity with the increasing value of… Read More "Persistence in the Shadows: A Study of Zephyr Miner Exploiting System Services"
Ravie LakshmananFeb 02, 2026Vulnerability / Artificial Intelligence A high-severity security flaw has been disclosed in OpenClaw (formerly referred to as Clawdbot and Moltbot) that could allow remote code execution (RCE) through a crafted malicious link. The issue, which is tracked… Read More "OpenClaw Bug Enables One-Click Remote Code Execution via Malicious Link"
“The malware exhibits advanced anti-analysis techniques, including anti-VM, anti-debugging, and process injection detection, alongside extensive credential harvesting, surveillance capabilities, and remote system control,” they said. “Stolen data is exfiltrated as ZIP archives over Discord webhooks and Telegram bots.” Initial access… Read More "This stealthy Windows RAT holds live conversations with its operators"
A new set of Zero Trust Implementation Guidelines (ZIGs) detailing how organizations can progress to target-level zero trust maturity has been released by the US National Security Agency (NSA). The guidance introduces Phase One and Phase Two of the ZIGs,… Read More "NSA Publishes New Zero Trust Implementation Guidelines"
Of the many lessons that can be learned from how the Optus data breach was handled, one stands out – Australia’s privacy laws are not equipped to support Aussie data breach victims. To change this, the Australian Government is amending… Read More "Australia & its New Telco Regulation Compliance Guide for 2026"
In the cinematic tapestry of cybersecurity, where tales of intrigue and innovation collide, one story emerges from the shadows of the past. It’s a story that began in the early 1990s, during the DOS era, when computer viruses were still… Read More "5th January and The Tale of Joshi Virus: India’s First Global Computer Virus"
