21 Aug

Apple rushes out fix for active zero-day in iOS and macOS

Apple has shipped emergency updates to fix an actively exploited zero-day in its ImageIO framework, warning that the flaw has already been abused in targeted

Author rabih
21 Aug

Colt changes tune, admits data theft as Warlock gang begins auction

A week after its services were disrupted by a cyberattack, UK telco Colt Technology Services has gone back on its initial statement to confirm that

Author rabih
21 Aug

Google yet to take down ‘screenshot-grabbing’ Chrome VPN extension

Security boffins at Koi Security have warned of a shift in behavior of a popular Chrome VPN extension, FreeVPN.One, which recently appears to have begun

Author rabih
21 Aug

AI crawlers and fetchers are blowing up websites, with Meta and OpenAI the worst offenders

Cloud services giant Fastly has released a report claiming AI crawlers are putting a heavy load on the open web, slurping up sites at a

Author rabih
21 Aug

“What happens online stays online” and other cyberbullying myths, debunked

Kids Online Separating truth from fiction is the first step towards making better parenting decisions. Let’s puncture some of the most common misconceptions about online

Author rabih
21 Aug

China cut itself off from the global internet for an hour on Wednesday

China cut itself off from much of the global internet for just over an hour on Wednesday. Activist group Great Firewall Report spotted the outage,

Author rabih
21 Aug

Microsoft stays mum about M365 Copilot on-demand security bypass

UPDATED Microsoft has chosen not to tell customers about a recently patched vulnerability in M365 Copilot. The issue allowed M365 Copilot to access the content

Author rabih
20 Aug

Amazon quietly fixed Q Developer flaws that made AI agent vulnerable to prompt injection, RCE

Amazon has quietly fixed a couple of security issues in its coding agent: Amazon Q Developer VS Code extension. Attackers could use these vulns to

Author rabih
20 Aug

FBI: Russian spies exploiting a 7-year-old Cisco bug to slurp configs from critical infrastructure

The FBI and security researchers today warned that Russian government spies exploited a seven-year-old bug in end-of-life Cisco networking devices to snoop around in American

Author rabih
20 Aug

Commvault releases patches for two nasty bug chains after exploits proven

Researchers at watchTowr just published working proof-of-concept exploits for two unauthenticated remote code execution bug chains in backup giant Commvault. They reported the four vulnerabilities

Author rabih
20 Aug

‘Limited’ data leak at Aussie telco turns out to be 280K customer details

Aussie telco giant TPG Telecom has opened an investigation after confirming a cyberattack at subsidiary iiNet. It said the “cyber incident” was contained on August

Author rabih
20 Aug

McDonald’s not lovin’ it when hacker exposes nuggets of rotten security

A white-hat hacker has discovered a series of critical flaws in McDonald’s staff and partner portals that allowed anyone to order free food online, get

Author rabih
19 Aug

Don’t want drive-by Ollama attackers snooping on your local chats? Patch now

A now-patched flaw in popular AI model runner Ollama allows drive-by attacks in which a miscreant uses a malicious website to remotely target people’s personal

Author rabih
19 Aug

Like burglars closing a door, Apache ActiveMQ attackers patch critical vuln after breaking in

Criminals exploiting a critical vulnerability in open source Apache ActiveMQ middleware are fixing the flaw that allowed them access, after establishing persistence on Linux servers.

Author rabih
19 Aug

Casino tech outfit Bragg cops to intrusion but says data jackpot untouched

Canadian casino software slinger Bragg Gaming Group has disclosed a “cybersecurity incident,” though it’s adamant the intruders never got their hands on customer data. MGM

Author rabih
19 Aug

US spy chief claims UK backed down over Apple backdoor demand

The UK government has reportedly abandoned its attempt to strong-arm Apple into weakening iPhone encryption after the White House forced Blighty into a quiet climb-down.

Author rabih
19 Aug

The need for speed: Why organizations are turning to rapid, trustworthy MDR

Business Security How top-tier managed detection and response (MDR) can help organizations stay ahead of increasingly agile and determined adversaries Phil Muncaster 19 Aug 2025

Author rabih
19 Aug

More customers asking for Google’s Data Boundary, says Cloud Experience boss

Interview Google’s President of Customer Experience, Hayete Gallot, offered some words of comfort to developers who are looking nervously at the rise of AI assistants

Author rabih
Load moreLoadingAll items loaded