-
Suspected Russian Hackers Abuse Google OAuth and WhatsApp Linking to Hijack Accounts
Three distinct suspected Russian cyber espionage threat clusters have been observed leveraging legitimate authentication flows to single …
-
China Is Strapping ‘Digital Bombs’ to Civilian Infrastructure—Is the US Ready?
insurance executives gathered in a Times Square conference room to play out a scenario: a Chinese cyberattack knocks out 5,000 US water …
-
After one week wearing the Pixel Watch 5, here’s what I want most
Follow ZDNET: Add us as a preferred source on …
-
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More
A lot of this week’s trouble starts with something trusted doing exactly what it was allowed to do. Signed drivers get turned against …
-
AWS Network Firewall now supports rule hit count
As firewall rule sets grow in complexity, security teams face a common challenge: manual log analysis is used to determine which rules are …
-
Apple’s smart home springs a leak – here’s everything we expect to see in September
Follow ZDNET: Add us as a preferred source on …
-
Why replacing staff with AI backfires – and 5 ways smart leaders generate real value instead
Follow ZDNET: Add us as a preferred source on …
-
Cloud Security Consolidation: Cutting Costs Without Adding Risk
Aikido combines cloud posture and infrastructure security with SAST, SCA, secrets, container scanning, IaC, DAST and additional …
-
AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure
The U.S. government on Wednesday warned of an “active …
-
Wispr Flow is better than your device’s built-in voice text tool – how to try it for free
A couple of years ago, I fell and fractured my left wrist. The injury meant that I couldn’t write, at least not by typing with two …
-
US Bank investigates LockBit’s claims as ransomware crims set pay-or-leak deadline
US Bank says that it’s investigating ransomware crew LockBit’s claims that it breached the financial institution and stole data, which …
-
Google will let you tailor your Discover feed using natural language now
If you’re not happy with the algorithm on your Discover page, you can now tell Google what you want in your own …
●●●
NVD
- CVE-2026-76762 – A vulnerability was detected in code-projects Assessment Management 1.0. The affected …
- CVE-2026-54616 – NanaZip is the 7-Zip derivative intended for the modern Windows experience. From version …
- CVE-2026-76764 – A flaw has been found in code-projects Employee Management System 1.0. The impacted …
- CVE-2022-4996 – A flaw has been found in mruby 3.1.0. Affected is the function udiv of the file bigint.c. …
- CVE-2026-8619 – An unauthenticated denial-of-service vulnerability was identified in TP-Link TL-MR100 …
EXPLOITS
- PCMan 2.0.7 – Buffer Overflow
- flyto-core 2.26.7 – Arbitrary File Write
- Nodemailer 9.0.0 – File Read/ SSRF
- NanaZip 6.5 – DoS
- Linuxfabrik monitoring_plugins_6.0.0 – SSRF
SECURELIST
- APT group HoneyMyte upgrades CoolClient: the backdoor gets a kernel-level Windows rootkit
- Armored Likho expands its cyber-espionage toolkit
- Head Mare APT is exploiting vulnerabilities in an unpatched TrueConf server to deliver Pha
- Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selectio
- IT threat evolution in Q2 2026. Mobile statistics