Newspaper

The Qilin ransomware gang is exploiting a critical PAN-OS GlobalProtect authentication bypass flaw to breach victims' networks, according to cybersecurity company Arctic Wolf. Palo Alto Networks addressed the…

Ukraine's computer emergency response team, CERT-UA, has warned that Russian hackers are using fake CAPTCHA checks to trick people into compromising their own PCs. The Kremlin-backed Sandworm hacking group is reportedly…

Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites. The two security…

Malaysia is close to overhauling its nearly 30-year-old cybercrime law and giving authorities long-sought tools to pursue online fraud, digital impersonation and AI-generated abuse, but experts say the bill’s impact…

Free unofficial patches are available for a recently disclosed Windows zero-day flaw that allows attackers to escalate privileges on up-to-date Windows systems. The vulnerability (dubbed LegacyHive and without a CVE ID…

Researchers at Sysdig have linked a second attack on the same Langflow server to JADEPUFFER, the AI-agent-driven operator it first documented earlier this month. The same operator has now been spotted deploying…

Seen is the campus of the Korea National Diplomatic Academy, Seoul, Tuesday. Yonhap A data breach exposed the personal information of up to 10,000 diplomats and government officials for nearly 10 months after suspected…

Ravie LakshmananJul 21, 2026Vulnerability / Artificial Intelligence Threat actors are now exploiting a recently disclosed critical security flaw impacting ServiceNow AI Platform, according to Defused Cyber. In a post…

SEOUL, July 21 (Yonhap) -- Personal information of all South Korean diplomats was presumed to be leaked due to a data breach at an online education system run by an institution affiliated with the foreign ministry,…

Security incident disclosure — July 2026 Earlier this week, we detected and responded to an intrusion into part of our production infrastructure. This one was different from anything we had handled before in one…

Chinese police scientists have offered a rare insight into how they were able to break into the dark web using artificial intelligence to decode underground content. The dark web – a realm unfamiliar to most – is built…

The Gujarat police has organised 5,289 cyber safety awareness programmes across the State in the first two weeks of its 28-day special campaign, Operation Surakshit Cyberspace, aimed at ensuring the safe use of online…

1. How did you manage to break into a major bank as a teen? Treptel: “I got my first computer when I was 14, an old Pentium 486, and became obsessed with understanding how systems worked. I taught myself everything I…

virtualization OVH reveals semi-secret plan to fix critical Januscape hypervisor bug with mass reboots – and an Australian crash-test dummy French cloud backported a patch into Debian and didn’t seek customer consent,…

Infobip research reveals APAC businesses scaling AI-powered defenses to counter surge in automated fraud Fraudsters are leveraging AI to automate and personalize attacks, but enterprises are fighting back KUALA LUMPUR,…

I’m a few years into my homelab. (might go into a bit more detail about that at some point!), and I often need to ssh into one of my servers. At home, I can just do this by using a domain name like: ssh…

Mumbai: The Securities and Exchange Board of India( Sebi ) has imposed a penalty of ₹1 crore on Central Depository Services (India) Ltd for cybersecurity and operational lapses that led to the malware attack in November…

Passkeys are the most important thing happening in information security right now because they are the only principled solution to the overwhelming effectiveness of phishing attacks. Just like memory safety is the only…

Cosmetics giant Estée Lauder is notifying customers of a data breach after hackers exploited a flaw in Oracle E-Business Suite that the company used for human resources (HR) operations. The company says that last month…

security Attackers pummel critical WordPress vuln to create all sorts of mischief Plus dozens of PoCs in the public domain If you use WordPress, patch now. Just hours after fixes came out, attackers have begun…

Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks for weeks, allowing threat actors to install custom malware on vulnerable VPN appliances. Last week, SonicWall warned that…

Robot vacuums are supposed to clean the house. Turns out this one was mapping it for strangers. Security researchers have disclosed a critical vulnerability affecting SharkNinja’s cloud-connected robot vacuums that…

The Ostium trading platform announced that an attacker stole $23.75 million from its liquidity provider vault last week, after compromising off-chain infrastructure used to feed prices into the protocol. According to an…

It's not often we see a supply chain attack on RubyGems. But with summer vacations in full swing, perhaps we should have expected one. It was still a surprise when I opened the triage queue this morning and found a…

Security researchers broke out of the sandboxes in four widely used AI coding agents, including Cursor, OpenAI's Codex, Google's Gemini CLI and Antigravity, without attacking the sandbox head-on. The agent stays inside…

The FBI has arrested a 21-year-old Florida resident, identified as Zyaire Dontaevious Zamarion Wilkins, for allegedly distributing malware embedded in a series of Steam games to approximately 8,000 PCs. Arrested last…

off-prem AWS customer learns the hard way how even the smallest oversight can be mission-critical An expired card, overzealous spam filter, and broken authenticator create havoc with a very clear moral Nothing can ruin…

Last week, Searchlight Cyber released details about a vulnerability they are calling "wp2shell". The vulnerability was initially announced without a CVE number. But now has been assigned CVE-2026-63030. Many WordPress…

AI and ML Malicious cloud customers can bring down the power grid Datacenters tax utilities normally, so just imagine what they could do if workloads were designed to destroy AI datacenters wreak havoc on the power grid…

CYBER-CRIME Frontier LLMs couldn't help Hugging Face fight off evil agents Chinese open-weight model GLM 5.2 happily obliged Apparently, being a leading destination for AI development doesn't mean AI will bail you out.…