For a long time, I thought of the load balancer as a performance device. Its job was to distribute traffic, improve uptime, and make applications feel fast. Security was something that happened elsewhere, on firewalls, inside WAFs or deep in… Read More "Why application security must start at the load balancer"
A Chinese national has been sentenced to two decades behind bars for his part in a global crypto-investment fraud scheme which cost victims over $73m. Daren Li, 42, who is a dual national of China and tiny Caribbean state St.… Read More "US Court Hands Crypto Scammer 20 Years in $73m Case"
The US authorities have made it clear that they will have no truck with any individuals trying to by-pass regulations on trading cyberweapons with hostile powers. Selling sensitive cyber-exploit components to a Russian company landed Australian citizen Peter Williams with… Read More "US authorities punish sellers of malware and spyware"
International law enforcement operation led by Europol targets network of teenagers and young adults involved in ransomware attacks, extortion and other crimes Source link Read More "‘Project Compass’ Cracks Down on ‘The Com’: 30 Members of Notorious Cybercrime Gang Arrested"
Government Communications Headquarters (GCHQ, the UK equivalent of the US’s National Security Agency, or NSA), has just advertised for a chief information security officer. The role, which the ad describes as “one of the most influential cyber security leadership roles… Read More "One of the ‘most influential cybersecurity’ roles will pay under $175,000"
A cyber espionage group linked to North Korea has been observed deploying a new malicious campaign using removable media infection tools to gain access to air-gapped systems. The group, APT37, is well-known hacking team active since at least 2012 and… Read More "North Korea’s APT37 Expands Toolkit to Breach Air-Gapped Networks"
United States Customs and Border Protection plans to spend $225,000 for a year of access to Clearview AI, a face recognition tool that compares photos against billions of images scraped from the internet. The deal extends access to Clearview tools… Read More "CBP Signs Clearview AI Deal to Use Face Recognition for ‘Tactical Targeting’"
Ravie LakshmananFeb 27, 2026Malware / Surveillance The North Korean threat actor known as ScarCruft has been attributed to a fresh set of tools, including a backdoor that uses Zoho WorkDrive for command-and-control (C2) communications to fetch more payloads and an… Read More "ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks"
The full attack chain involves a victim visiting a malicious website whose hidden script connects to the locally running OpenClaw gateway via WebSockets, brute-forces its password without rate limits, and silently registers as a trusted device due to implicit localhost… Read More "Your personal OpenClaw agent may also be taking orders from malicious websites"
The UK government has claimed it has reduced its backlog of critical vulnerabilities by 75% and reduced cyber-attack fix times by 87%. Serious security weaknesses in public sector websites are fixed six times faster, cutting the average time from nearly… Read More "UK Vulnerability Monitoring Service Cuts Unresolved Security Flaws"
