Information Security News Blog
-
A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password. Unit 42 confirmed that...
-
A Home Media Server Turns Into a Botnet Node An ordinary home media server can become a tool for cryptocurrency mining and for hidden relaying of other people’s traffic. Researchers found a chain of...
-
A Large Tor Exit Node Attack An unknown attacker took over 333 Tor exit nodes. That gave the intruder a way to intercept SSH connections and unencrypted correspondence. The hijacked relays made up about...
A Phishing Scheme Worth Over $10 Million Ordinary phishing emails grew into a multimillion-dollar scheme built on tax refunds and government loans. A US federal court has sentenced Chukwuemeka Victor Amachukwu, 40, to eight...
A security patch can neutralize a vulnerability while simultaneously exposing a direct path to the next exploit. Recently, cybersecurity firm Terra Security investigated how security patches became maps for attackers across the digital ecosystem....
The PHP security team recently issued an urgent alert across the web ecosystem. Specifically, maintainers scheduled an expedited update on Wednesday, 21 October 2026 at 14:00 UTC to remediate two severe flaws. Although officials...
Security researchers recently uncovered a catastrophic cryptographic blunder at Indian certificate authority eMudhra, operating as emSign. Specifically, auditors discovered that private keys for eight intermediate certificate authorities were compromised. Because intermediate certificates issue downstream...
A Chinese-speaking threat actor recently directed autonomous AI agents to conduct large-scale cyberattacks against online storefronts. Beginning on September 25, these autonomous systems targeted more than 1,200 commercial websites across four nations. According to...
A critical architectural flaw in the Linux IPv4 network stack allows unprivileged guest machines to escape isolation. Specifically, threat actors can seize total root control over the underlying physical host. The vulnerability carries an...
Losses Exceed the Company’s Own Estimate Crypto platform Gamdom may have lost more than $4.2 million in a hot wallet hack. Hot wallets are internet-connected vaults that allow quick payouts. That figure exceeds the...
Counterfeit AUR Helpers Run Code as Root Researchers found fake Arch Linux packages that pose as the popular tools yay and paru. During installation, they run malicious code with root privileges. The attackers kept...
A Breach That Spared the Market A cyberattack on stock market infrastructure does not always halt trading. Even so, it can still give criminals access to sensitive investor details. That is what the Romanian...
Crafting a lightweight Windows 11 installation no longer requires complex PowerShell commands or tedious manual scripting. Instead, the developer unveiled the Tiny11 Builder WinUI release v0.1.1 as a dedicated desktop utility. This modern application...
In just six days, artificial intelligence agents developed by security firm XBOW assembled a potent vulnerability chain against Google Chrome. Consequently, this exploit allows arbitrary program execution on Windows machines when a victim merely...
Computer science researchers recently demonstrated a novel technique to conceal dormant functions within artificial neural networks. Even auditors with unrestricted access to model weights cannot trigger the hidden functionality through standard testing. Specifically, engineers...