A crypto security event that promised to teach attendees how to avoid scams is now the subject of scam allegations. The gathering, branded “Don’t Get Played,” was held as a side event during TOKEN2049 week in Singapore and co-hosted by… Read More "Don’t Get Played: TOKEN2049 Security Event Faces Scam Claims"
Swati KhandelwalOct 13, 2026Vulnerability / IoT Security Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG… Read More "LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network"
Two other flaws target pipeline security. CVE-2026-16301 (CVSS 8.5) could have allowed users with the Developer role to execute CI/CD pipelines on protected branches without authorization. CVE-2026-14814 (CVSS 8.2) potentially enabled attackers to poison cached responses for raw repository files,… Read More "GitLab patches a max-severity regex flaw alongside five high-severity bugs"
Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them 27 Mar 2026 • , 4 min. read Japan has entered its annual tax filing and… Read More "A cunning predator: How Silver Fox preys on Japanese firms this tax season"
The XWorm RAT developers have expanded the malware’s capabilities with fresh plugins that turn it into a surveillance platform, cybersecurity firm Netskope reports. A sophisticated, multi-functional Windows RAT first observed in 2022, XWorm provides attackers with full control over the… Read More "XWorm RAT Evolves Into Surveillance Platform"
Two of 31 newly disclosed flaws in Progress Software’s MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says. Progress published all 31 on October 12 and scored five… Read More "Two Critical MarkLogic Flaws Could Give Delegated Managers Persistent Admin Control"
The issue is now fixed, Bloom Security researcher Golan Myers told CSO. “The npm team confirmed that a fix had been shipped on October 2, introducing a 48-hour expiry for unvalidated Trusted Publishing configurations,” he said. Myers said Bloom has… Read More "Over 1,500 npm packages exposed by Trusted Publishing validation flaw"
This year, AI agents took the center stage – as a defensive capability, but more pressingly as a risk many organizations haven’t caught up with 27 Mar 2026 That’s a wrap on the RSAC™ 2026 Conference. For its 35th edition,… Read More "RSAC 2026 wrap-up – Week in security with Tony Anscombe"
The British government has announced a range of new initiatives designed to better protect the nation from emerging AI threats. Speaking at Imperial College London on October 12, AI minister Kanishka Narayan laid out a series of plans, including the… Read More "UK Government Announces Sweeping New AI Security Plans"
An executive asks about a cloud app you’ve never heard of, and a check turns up dozens more that nobody approved. Each one already holds company data, and you have to explain that risk to a budget holder in one… Read More "What is Shadow SaaS? Causes, Risks, and Management Tips"
