When Hang Up Does Not Hang Up In Signal, the hang-up button could fail even when a user tried to end a call. A critical bug in the RingRTC library let another call participant...
A Backdoor That Listens for One Voice Researchers have taught speech recognition systems to recognize a specific person by voice. At that moment, the system secretly changes the person’s words. In the most dangerous...
Merely launching Python after installing LiteLLM triggered immediate credential theft. On October 21, threat actors injected a malicious data stealer into version 1.107.0. The compromise affected all seven PyPI wheel releases and official Docker...
A five-year-old software vulnerability recently compromised servers associated with the Ukrainian state data exchange infrastructure. Specifically, an unidentified adversary leveraged the critical Log4Shell flaw within the Graylog log management platform. Consequently, the intruder achieved...
The Zero Day Initiative (ZDI) team at Trend Micro recently experienced an operational mishap. Specifically, researchers inadvertently copied several confidential vulnerability reports to the public Linux Kernel Mailing List. Among these disclosures were two...
A Cloud Breach in Under Three Hours A cloud breach can fit inside a single work meeting. Microsoft has disclosed a large operation by the actor Storm-0940. Its members used the ARTEX AI platform...
Threat actors no longer need to encrypt classroom computers to disrupt academic instruction. In Idaho, cybercriminals seized control of connected security cameras, electronic door locks, and heating systems. Consequently, the Jerome School District cyberattack...
A Privacy Feature Meets a Federal Charge An ordinary privacy feature has led to a threat of five years in prison. New court documents also point to a different reason for the search than...
A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password. Unit 42 confirmed that...
A Home Media Server Turns Into a Botnet Node An ordinary home media server can become a tool for cryptocurrency mining and for hidden relaying of other people’s traffic. Researchers found a chain of...
A Large Tor Exit Node Attack An unknown attacker took over 333 Tor exit nodes. That gave the intruder a way to intercept SSH connections and unencrypted correspondence. The hijacked relays made up about...
A Phishing Scheme Worth Over $10 Million Ordinary phishing emails grew into a multimillion-dollar scheme built on tax refunds and government loans. A US federal court has sentenced Chukwuemeka Victor Amachukwu, 40, to eight...
A security patch can neutralize a vulnerability while simultaneously exposing a direct path to the next exploit. Recently, cybersecurity firm Terra Security investigated how security patches became maps for attackers across the digital ecosystem....
The PHP security team recently issued an urgent alert across the web ecosystem. Specifically, maintainers scheduled an expedited update on Wednesday, 21 October 2026 at 14:00 UTC to remediate two severe flaws. Although officials...
Security researchers recently uncovered a catastrophic cryptographic blunder at Indian certificate authority eMudhra, operating as emSign. Specifically, auditors discovered that private keys for eight intermediate certificate authorities were compromised. Because intermediate certificates issue downstream...
