Your blog category
A heap over-read in the Squid web proxy can leak another user’s cleartext HTTP request, including any credentials or session tokens it carries, to anyone already allowed to send traffic… Read More »29-Year-Old Squid Proxy Bug ‘Squidbleed’ Can Leak Cleartext HTTP Requests
Google has set September 30, 2026, as the day it begins enforcing Android developer verification in the first four countries, and the major device-maker app stores are in from the start. On… Read More »Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
Cybersecurity researchers have disclosed details of a new campaign that delivers CastleStealer by means of a previously unreported malware loader dubbed OXLOADER. According to Elastic Security Labs, the campaign leverages… Read More »New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
It’s Monday again. This week’s threat list looks painfully familiar: abused integrations, fake tools, poisoned websites, ransomware crews trying to shut down security tools, and mobile malware asking for way… Read More »⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More
Earlier this month, I spoke at the Gartner Security & Risk Management Summit about a blind spot most security programs are still not accounting for – how attackers are circumventing… Read More »Stop Your Legacy Infrastructure from Hijacking Your AI Agents
Canada’s spy service got a judge’s permission to reach into infected servers, home routers, and IoT gear sitting on Canadian soil and neutralize two foreign-run botnets. The Federal Court released a… Read More »Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
A new malware family is turning forgotten home routers into a distributed reconnaissance and proxy network, not the DDoS botnet these devices usually end up in. QiAnXin’s XLab calls it AryStinger and… Read More »AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
A new report from INTERPOL has revealed a “dramatic increase” in cybercrime in Asia and the South Pacific, fueled by rapid digitalization, internet penetration, new technologies, organized criminal networks, and… Read More »INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific
Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is… Read More »Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before… Read More »The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes