…Cellebrite’s customers are abusing its tech? We’d love to hear from you. From a non-work device and network, you can contact Lorenzo Franceschi-Bicchierai securely on Signal at +1…
…In this episode of Apple @ Work, Luke Wescott from Sublime Security joins the show to discuss the recent surge in callback phishing attacks abusing auto notifications, verifications, alerts, receipts, and more. Apple…
…However, the new Chrome Device Bound Session Credentials (DBSC) security feature should effectively block malicious actors from abusing such stolen cookies, as they will not have access to the cryptographic keys required…
…Cybersecurity and Infrastructure Security Agency (CISA) has added 14 SAP vulnerabilities to its Known Exploited Vulnerabilities catalog, including three that were abused in ransomware attacks. SAP is a German multinational software corporation…
Hello everyone, I am pretty cyber security illiterate so I am unsure of what to do in this situation and am requesting guidance. I have multiple individuals in my home and have recently discovered that my ip address had …
I've been offered an opportunity to do some work with an Israeli cybersecurity company. I've met some of the staff and have used some of the company's products - no issues on a personal level. The company offers defensiv…
Another Linux vulnerability in the same category as Dirty Frag has been found! Another eight of these more I guess? In any case the fatigue is coming up for me. Things are getting crazy! "It abuses a logic bug in the Lin…
Something feels off about how the internet is changing. More and more, the open web is treated as suspicious by default. A normal website asks you to prove you’re human. A browser extension gets treated like malware. A l…
Hi guys, I send out a weekly newsletter with the latest cybersecurity vendor reports and research, and thought you might find it useful, so sharing it here. All the reports and research below were published between July …
Plug and Pwn attack uses fake USB devices for Windows SYSTEM access By Lawrence Abrams August 12, 2026 12:05 PM Security researchers have disclosed new "Plug and Pwn" attacks that abuse…
…Once they were inside networks, China’s bots found and abused valid credentials, escalated privileges, and moved laterally. In some cases, the agents even found and stole sensitive data. Machines don't…
…targeting iPhone users and stealing their sensitive data is being abused by "multiple" spyware vendors and suspected nation-state goons, security researchers said on Wednesday. The exploit kit, called DarkSword, has been…
…With this month's Android security updates, Google has fixed 18 critical vulnerabilities across System, Framework, and Qualcomm closed-source components that attackers can abuse to trigger denial-of-service conditions and…
…Formerly known as MobileIron Sentry, the Ivanti Sentry security gateway appliance secures traffic between back-end corporate systems and remote mobile devices. Tracked as CVE-2026-10520 , the maximum-severity vulnerability stems…
…crew Russia-linked APT28 attackers already abusing new Microsoft Office zero-day Dutch authorities released a cybersecurity advisory and are assisting affected users in securing their accounts. They also warned that subtle…
