GrapheneOS Duress PIN Case Reveals DHS Search Motive
A Privacy Feature Meets a Federal Charge An ordinary privacy feature has led to a threat of five years in prison. New court documents also point to a different reason for the search than...
Information Security News Blog
PAN-OS Flaw Fuels Qilin and Inc Ransomware Attacks
A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password. Unit 42 confirmed that...
Plex2Shell Exploit Chain Hits Plex Media Servers
A Home Media Server Turns Into a Botnet Node An ordinary home media server can become a tool for cryptocurrency mining and for hidden relaying of other people’s traffic. Researchers found a chain of...
Attackers Hijack 333 Tor Exit Nodes With Ebury
A Large Tor Exit Node Attack An unknown attacker took over 333 Tor exit nodes. That gave the intruder a way to intercept SSH connections and unencrypted correspondence. The hijacked relays made up about...
Nigerian Hacker Gets Eight Years for Tax Fraud
A Phishing Scheme Worth Over $10 Million Ordinary phishing emails grew into a multimillion-dollar scheme built on tax refunds and government loans. A US federal court has sentenced Chukwuemeka Victor Amachukwu, 40, to eight...
Flawed Security Patches Surge Across Open Source Projects
A security patch can neutralize a vulnerability while simultaneously exposing a direct path to the next exploit. Recently, cybersecurity firm Terra Security investigated how security patches became maps for attackers across the digital ecosystem....
Critical PHP Vulnerabilities Trigger Emergency Patch
The PHP security team recently issued an urgent alert across the web ecosystem. Specifically, maintainers scheduled an expedited update on Wednesday, 21 October 2026 at 14:00 UTC to remediate two severe flaws. Although officials...
eMudhra Intermediate Certificates Revoked Over Weak Keys
Security researchers recently uncovered a catastrophic cryptographic blunder at Indian certificate authority eMudhra, operating as emSign. Specifically, auditors discovered that private keys for eight intermediate certificate authorities were compromised. Because intermediate certificates issue downstream...
Autonomous AI Agents Attack Over 100 Online Retailers
A Chinese-speaking threat actor recently directed autonomous AI agents to conduct large-scale cyberattacks against online storefronts. Beginning on September 25, these autonomous systems targeted more than 1,200 commercial websites across four nations. According to...
Linux PwnEscape Flaw Enables Cloud Virtual Machine Escapes
A critical architectural flaw in the Linux IPv4 network stack allows unprivileged guest machines to escape isolation. Specifically, threat actors can seize total root control over the underlying physical host. The vulnerability carries an...
Gamdom Hot Wallet Hack May Top $4.2 Million
Losses Exceed the Company’s Own Estimate Crypto platform Gamdom may have lost more than $4.2 million in a hot wallet hack. Hot wallets are internet-connected vaults that allow quick payouts. That figure exceeds the...
Fake yay and paru Packages Hit Arch Linux AUR
Counterfeit AUR Helpers Run Code as Root Researchers found fake Arch Linux packages that pose as the popular tools yay and paru. During installation, they run malicious code with root privileges. The attackers kept...
