In a welcome relief for sysadmins, Microsoft released security updates for just 79 vulnerabilities in this month’s Patch Tuesday yesterday, including two publicly disclosed zero-days. Microsoft categorizes zero-day vulnerabilities as flaws which have either been exploited or disclosed without a… Read More "Microsoft Fixes Two Publicly Disclosed Zero-Days"
Ravie LakshmananMar 11, 2026DevSecOps / AI Security A threat actor known as UNC6426 leveraged keys stolen following the supply chain compromise of the nx npm package last year to completely breach a victim’s cloud environment within a span of 72… Read More "UNC6426 Exploits nx npm Supply-Chain Attack to Gain AWS Admin Access in 72 Hours"
The business social networking site is a vast, publicly accessible database of corporate information. Don’t believe everyone on the site is who they say they are. 16 Jan 2026 • , 4 min. read In November, Britain’s Security Service began… Read More "Why LinkedIn is a hunting ground for threat actors – and how to protect yourself"
“Instead of abusing local binaries like PowerShell or WMI [Windows Management Instrumentation] to evade detection, adversaries now leverage native cloud administrative tools, APIs, identity systems, and management consoles to operate using legitimate functionality,” says Arif Khan, head of threat hunting… Read More "12 ways attackers abuse cloud services to hack your enterprise"
It’s snow joke – sporting events are a big draw for cybercriminals. Make sure you’re not on the losing side by following these best practices. 02 Feb 2026 • , 5 min. read Cybercriminals have always been drawn to major… Read More "Beware of Winter Olympics scams and other cyberthreats"
Cybersecurity researchers have discovered five malicious Rust crates that masquerade as time-related utilities to transmit .env file data to the threat actors. The Rust packages, published to crates.io, are listed below – chrono_anchor dnp3times time_calibrator time_calibrators time-sync The crates, per… Read More "Five Malicious Rust Crates and AI Bot Exploit CI/CD Pipelines to Steal Developer Secrets"
Further, and bizarrely, once in the system, the agent autonomously gave itself a voice so it could conduct a real-time conversation with the AI voice agents at Jack & Jill, in one instance in the guise of the US president.… Read More "Jack & Jill went up the hill — and an AI tried to hack them"
Like any other marketplace, the social commerce platform has its share of red flags. It pays to know what to look for so you can shop or sell without headaches. 19 Feb 2026 • , 5 min. read Social commerce… Read More "Is Poshmark safe? How to buy and sell without getting scammed"
loading=”lazy” width=”400px”>Viel hilft nicht immer viel. Roman Samborskyi | shutterstock.com Auf der Suche nach Möglichkeiten, sich vor ständig wachsenden Cyberbedrohungen zu schützen, erliegen nicht wenige Unternehmen einem regelrechten Security-Tool- und -Service-Kaufrausch. Kommen noch Abteilungssilos und regelmäßige Übernahmen hinzu, steigt die… Read More "6 Mittel gegen Security-Tool-Wildwuchs"
ESET researchers uncovered the first known case of Android malware abusing generative AI for context-aware user interface manipulation. While machine learning has been used to similar ends already – just recently, researchers at Dr.WEB found Android.Phantom, which uses TensorFlow machine… Read More "PromptSpy ushers in the era of Android threats using GenAI"
