WHATS UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Security - Ars Technica ·
WHATS
THE HAX?
Top story
Also in coverage
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CyberScoop ·
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
The Hacker News ·
LLMJacking Emerges as Thriving Cybercriminal Enterprise
darkreading ·
Article feed
60 sources ↓Shutting the Door on the XCPE Botnet
Gorbag: Orcs at the border harvesting intelligence from Ukraine
We found 4,972 "hello" messages hiding thousands of malicious commands targeting Flowise
Slaiclind: The blockchain is now a covert communication channel
UEFI bootkit infected fully patched Windows machines. Is Microsoft to blame?
Anthropic VS code extension on Cursor backdoored for nearly 12 hours
Hackers steal $6.3 billion from Binance in record crypto heist
Massive leak exposes 41,000 DHS workers and undercover ICE agents
CrowdStrike moves to acquire Fiddler and Dreadnode, adding AI observability and testing to its security platform
CISA’s new strategy runs into America’s blind trust problem
Google shuts down global botnet running on certified Android devices
Business groups mount fresh campaign for long-term renewal of information sharing law
Google Warns LLMjacking Attacks Are Costing Some Enterprises Up to $1 Million in Cloud Charges
cPGuard Update Channel Hijacked to Backdoor Linux Servers and Collect Password Hashes
Red Hat Patches 9.8-Rated Linux TCP RCE Flaw While Ubuntu Releases Fixes for Testing
The 4 Elements of Exposure Prioritization and How to Operationalize Them
LLMJacking Emerges as Thriving Cybercriminal Enterprise
3AM Affiliate Embraces AI-Like Loops in European School Attack
One Compromised Laptop, Billions Lost: The Binance Attack-Path Warning
Russia-Aligned Gorbag Targets Ukraine for Intelligence
Hackers Exploit BTCPay Server Flaw to Steal Cryptocurrency
Cyber-Attack on Refrigeration Systems Hits Supermarkets Across Europe
Barracuda warns of critical flaws allowing root access to devices
Gartner Predicts SOCs Will Have 50% More Engineers Than Analysts by 2028
UK school estate hit by 3AM ransomware in suspected AI-assisted attack
Frontline Education Data Breach Impacts Over 1.3 Million
CrowdStrike Reportedly Paying $495 Million for AI Security Firms Fiddler, Dreadnode
Android’s November 2026 Updates Patch Over 200 Vulnerabilities
Police seize over 100 servers linked to investment fraud with more than €4 million in losses
Novee puts forgotten internet-facing assets through penetration testing
Assured helps recovery teams find clean backups after ransomware attacks
A hidden backdoor put 1.3 million TV boxes to work for criminals
Hackers put porn on public billboards and claim it was “far too easy”
Revolve card breach: 1.5 million people may be affected
AI made a Malware Viewer in Minecraft
malware.mob
The PHP Vulnerabilities Explained
Russia dismantles infrastructure of VasyGrek cybercrime group, detains three suspects
Russia-linked cyber spies target Ukraine's war crimes investigations, military aid routes
UK faces ‘unprecedented rise’ in cyberattacks in coming months, warns cyber chief
Pass-ta-key Golden Attack: Stealing Google Password Manager Synced Passkeys for Offline Account Takeover
A primer on TETRA mission-critical radio network authentication flaws
CPGuard / OPSSHIELD LLP Breach
Network appliances go more than a year without patches as exploits speed up
Enterprises pay $100,000 a day for AI they never ordered
Armed with AI, hackers target endpoint security blind spots, raising stakes for CISOs
AIs Hacking the Law
AI Vulnerability Finding
Friday Squid Blogging: Bigfin Squid Off California Coast
MLEP in KICS for Networks 5.0: how machine learning helps track network behavior of OT devices
CyberStrikeAI in the wild: the use of AI in real-world attacks on organizations
Filter generation in practice: from algorithms to LLMs
Deepfake Desensitization is the New Crisis
AI Agents Generated More Than 600 Million Requests to Login Pages
Majority of Cyberattacks Spread Beyond the Initial System
Inside XCPE, the botnet that turned 1.3M set-top boxes into proxy servers
Inside XCPE, the botnet that turned set-top boxes into proxy servers
NIS2 Makes Board Members Personally Liable for Access Control Decisions
🍍📟 [PAYLOAD] 🔴 Hak5 Live: WiFi Pineapple Pager with Darren Kitchen
🍍📟 Introducing 2.0 for WiFi Pineapple Pager and One More Thing...
Trust Me Bro Then Websites Went Offline (The php2shell story) | Threat Wire
Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies
Widespread PHP Flaw May Cause Many Site Outages Today
Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site
ISC Stormcast For Tuesday, November 3rd, 2026 https://isc.sans.edu/podcastdetail/10162, (Tue, Nov 3rd)
Mutipath TCP: Use and Detection, (Mon, Nov 2nd)
ISC Stormcast For Monday, November 2nd, 2026 https://isc.sans.edu/podcastdetail/10160, (Mon, Nov 2nd)
Black Hat Europe 2026 | Welcome Video
Black Hat Stories | Island.io
Black Hat Europe 2026 | Hear From Our Sponsors
Vulnerabilities in Node.js Affecting Cisco Products: October 2026
Cisco Informational for Emergency Distrust of eMudhra Root and Intermediate Certificate Authorities
Vulnerabilities in PHP Affecting Cisco Products: October 2026
What exploited vulnerabilities have in common: A data-driven analysis of real-world attacks
Inside a malicious Claude Code-branded extension and its persistent SSH backdoor
From help desk impersonation to AD CS abuse: Investigating ESC1 and ESC8 intrusion paths
I added LLM support on top of the original creature AI in Black & White so you can better bond with your creature: talk to it, teach it, command it, sing along with it (with the MP3 mod) or just listen to him describing his thoughts. Compatible with the VR mod too!
Jailbreaking my car's navigation system just so I can change the time
Detecting Frida Stalker
Anti-Oligarchy Activists Plan to Dox Elon Musk and Hundreds of Billionaire-Linked Homes
My Journey to the Center of America’s Political Spam Text Hell
Hundreds of Mundane AI Apps Are Hiding Sexually Abusive Deepfake Features
I recreated a real MCP vulnerability and tested it with @snyksec’s Evo to see if it finds it. 👀 #ad
I Rebuilt a Real World MCP Bug. Can AI Find It?
Cloudflare is offering a $3,000 bounty for any unique PHO2SHELL bypass.
AI Agent Order Data: Agentic Commerce on Forter’s Network
How to Stop Holiday Return Abuse and Reseller Fraud
Holiday Shopping Gets an Agentic AI Twist
Copilot Told Researchers How to Hack It
Your Smart Device Is Tracking You More Than You Think
This Is How NVIDIA's AI Mercedes Drives in Real Traffic
When confusion reigns, trusted vendors must guide their SMB customers
This month in security with Tony Anscombe – October 2026 edition
Most Firms Using Three or More AI Tools Stop 90% of Fraud Attempts
FTC Takes Down 19 Fake FTC Sites in Impersonation Scam Crackdown
Raise Cuts Chargebacks 45% and Nearly Ends Manual Fraud Reviews
Adding onto the post "Archived malware I found over the years pt1" BY: "u/Fickle_Plan_208" Effort post!!!!! read description.
Laowa lens firmware updater: 20/57 VirusTotal detections + official website flagged as JS/Redirector.TYD
Unpacking ATT&CK With MalChela v4.4
Email hacking
GREYWARD security-focused Fedora desktop
How could 6.3 Billion worth of coins stolen within 20 minutes without any guard from my programming perspective?
Difference between cyber risk management standard vs. framework
Purple team using AI to expedite both sides
Open-Source Contribution Vibes
HackTheBox - MakeSense
HackTheBox - Checkpoint
HackTheBox - Eloquia
Chromium: CVE-2026-118304 Improper input validation in SVG
Chromium: CVE-2026-118305 Memory corruption in Turbolev
Chromium: CVE-2026-118306 Memory corruption in FileSystem
this WiFi GPU is wild.....
local AI's biggest problem... they solved it?
why EVERYONE is copying this
DEF CON CTF Walkthrough: OSINT Edition
Real Folks of Cyber | Thomas Rogers | DITL
Is AI Security a Real Career?
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA Adds Two Known Exploited Vulnerabilities to Catalog
Siemens Mendix SAML Module
Hackers leak personnel data of 41,000+ Homeland Security staff, including ICE and border agents
BYOD cyberattack diverts ambulances and cancels classes at University of New Mexico health center
Smashing Security podcast #490: How Jared Kushner’s iPhone was allegedly hacked twice
Is curl Getting Harder to Hack? Daniel Stenberg on AI vs. Decades of Hardening
In Singapore for a few days hanging out with hackers and having a good time.
Your AI hackbot has found another 100+ vulnerabilities. Who fixes them? And how? ft Erlend
The best due diligence on a vendor is who they’ve worked with
Heimdal named Advanced Persistent Threat Solution of the Year at the Computing Security Awards
Data Breach Statistics That Matter in 2026
SHARED INTEL Q&A: 82% of campaign domains expose donors to email fraud before midterms
SHARED INTEL Q&A: PHP2Shell is no Log4Shell — open-source flaw is more warning than wildfire
MY TAKE: OktoberTech reveals a hardening AI foundation — but no one yet governing the agents
ZDI-CAN-35872: LiteLLM
Prediction Markets Emerge as a New Vertical for Traffer Teams
Behind Japan’s Warnings of a Cyber Crisis
PHP2Shell Exploitation: Two Critical PHP Flaws Explained
Proofpoint Introduces Flex to Help Customers Invest with Confidence as Security Needs Evolve
Proofpoint Joins Microsoft Integrated Cloud Email Security (ICES) Ecosystem
Proofpoint CEO Sumit Dhawan On ‘Market-Changing’ $6.3B Varonis Deal, IPO Goal
The AI advantage your company can keep
Bringing CRM into the flow of work and agents into business process for sales and service teams
Introducing the new Copilot with Home, Code and Autopilot
The $2,000 php2shell Challenge Was Unexploitable
php situation 24h later
The race to the first exploit // php2shell
Does your fraud risk assessment measure up when a financial crime occurs?
Fraud Risk Assessment: A New Model and New Approach
Assessing the Strength of Your Fraud Controls
#StopRansomware: SafePay Ransomware
Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data
China-Based Artificial Intelligence Companies Conducting Industrial-Scale Distillation Campaigns Against U.S. AI Companies
Anthropic’s AI Reversal Is A Warning Shot For Agentic Defense
Agentic AI Is Changing Security Decisions: Why Accountability Must Be Designed, Not Assumed
A New OT Security Playbook for Connected Robots
eIDAS 2.0 and AMLR Updated Standards: What Should Regulated Businesses Do Next?
Business Fraud at Network Scale: What the $3.5B Medicare Hospice Crisis Reveals About Know Your Business
DCSG1 - Pwn2Own Level Break of a Printer - SungJun Park, WonBeen Im
DCSG1 - Augmenting Apple's Source Code and OS Logs with AI Agents -Olivia Gallucci
DCSG1 - Actual OT Cyber Security - Dillon Lee
AI Agents Can Be Secured. We Can Do It.
Why the Open Secure AI Alliance Matters: Open Frontier Models, Open Deployment Flexibility
Tracking Over 35,000 Fake Sites in the 2026 World Cup Scam Wave
Ransomware: A Continuing Threat for Small Businesses
AI in Tax Season: Risks, Scams, and How to Protect Your Data
Tax Season Scams to Watch For This Year
Why every payments team should be watching for ACH fraud
From the Edge to the Core: 9 Ways PKI Secures Your Network
How to Secure Your Email Server on an SMB Budget
Microsoft Build 2026: Building agentic apps with Microsoft Fabric and Microsoft Databases
Azure IaaS: Defense in depth built on secure-by-design principles
Enforcing trust and transparency: Open-sourcing the Azure Integrated HSM
How FIN6 Exfiltrates Files Over FTP
Emulating FIN6 - Active Directory Enumeration Made EASY
The SECRET to Embedding Metasploit Payloads in VBA Macros
Try another search or clear the filters.
Showing 180 of 993 loaded entries. Search and all-headlines view include all available entries in this section. Browse the feed archive.