As I sit pondering the concrete reality of the cloud in Cyberfort’s waiting area, the company’s chief digital officer, Rob Arnold, emerges from a corridor. It was Arnold who arranged my visit, and we head for his office—through a security… Read More "Inside the Nuclear Bunkers, Mines, and Mountains Being Retrofitted as Data Centers"
New research released this week shows that over the past few years the US Department of Homeland Security has collected DNA data of nearly 2,000 US citizens. The activity raises questions about legality and oversight given that DHS has been… Read More "An App Used to Dox Charlie Kirk Critics Doxed Its Own Users Instead"
When Harry Jackson pulled his small motorcycle into Kathmandu on September 8, he had no idea the city was exploding in protests. He didn’t even know there was a curfew. People in Nepal, largely driven by Gen Z youth, had… Read More "How a Travel YouTuber Captured Nepal’s Revolution for the World"
That suggests anyone could set up similar hardware somewhere else in the world and likely obtain their own collection of sensitive information. After all, the researchers restricted their experiment to only off-the-shelf satellite hardware: a $185 satellite dish, a $140… Read More "Satellites Are Leaking the World’s Secrets: Calls, Texts, Military and Corporate Data"
At first, the engineers assumed this was connected to a previous zero-day in the same software that the company publicized in April, a ViewState deserialization vulnerability allowing remote code execution (RCE), tracked as CVE-2025-30406. However, engineers discovered that the targeted… Read More "Gladinet file sharing zero-day brings patched flaw back from the dead"
Resilience fails in the seams: tiny misconfigurations, forgotten defaults and silent drifts that escape the spotlight but magnify blast radius when things go wrong. Most breaches don’t begin with exotic zero-day vulnerabilities. They pivot on mundane gaps: time drift that… Read More "Dull but dangerous: A guide to 15 overlooked cybersecurity blind spots"
Spanish authorities have arrested a 25-year-old Brazilian national accused of leading the “GXC Team” – a Crime-as-a-Service (CaaS) operation that sold phishing kits, Android malware and AI-based tools to cybercriminals worldwide. The Guardia Civil said the suspect, known online as “GoogleXcoder,” was… Read More "Spain Arrests Alleged Leader of GXC Team Cybercrime Network"
Oct 13, 2025Ravie LakshmananBrowser Security / Windows Security Microsoft said it has revamped the Internet Explorer (IE) mode in its Edge browser after receiving “credible reports” in August 2025 that unknown threat actors were abusing the backward compatibility feature to… Read More "Microsoft Locks Down IE Mode After Hackers Turned Legacy Feature Into Backdoor"
Eine großangelegte Botnet-Kampagne zielt auf Remote-Desktop-Protocol-Anwender. Profit_Image – shutterstock.com Forscher des Security-Anbieters GreyNoise entdeckten kürzlich eine massive Angriffswelle, die von mehr als 100.000 IP-Adressen in mehr als 100 Ländern ausging. Die Analysten gehen davon aus, dass die Angriffe auf ein… Read More "Hacker nutzen 100.000 IP-Adressen für RDP-Angriffe"
A rise in cyber-attacks exploiting remote monitoring and management (RMM) tools for initial access via phishing has been observed by cybersecurity researchers. According to the new findings from the DarkAtlas research project, advanced persistent threat (APT) groups are abusing popular RMM… Read More "Hackers Target ScreenConnect Features For Network Intrusions"
