Category: Cyber Security
-
Microsoft will begin blocking unauthorized external scripts on Entra ID browser sign-in pages in mid-October 2026. The Entra ID security update aims to reduce script injection risks during authentication, including cross-site scripting attacks. The rollout should finish by late October. Meanwhile, organizations should check whether their sign-in processes rely on tools that inject scripts into…
-
TeamViewer has urged customers to update its remote access software after fixing five high-severity vulnerabilities. The TeamViewer security update addresses weaknesses that could allow unauthorized actions, code execution or elevated privileges. The flaws affect TeamViewer Full Client, Host and related services. However, the company says it has found no evidence of active exploitation or publicly…
-
Bitget says attackers reached its cryptocurrency wallet systems through third-party security appliances before stealing $387.5 million. New findings from SlowMist and Mandiant place the Bitget hack within a longer intrusion, with the earliest suspicious activity appearing in logs from August 31. The exchange has not publicly identified the affected products. However, it says the investigations…
-
Signal users can now create encrypted backups on iPhones and desktop computers, extending a feature previously available on Android. With version 8.30, Signal local backups also adopt a shared format across platforms, bringing more consistency to saving and restoring conversations. The release completes the first phase of Signal’s backup project across Android, iOS, Windows, macOS,…
-
Attackers are using custom ChatGPT assistants to steer people toward fake security checks that install remote access malware. Huntress researchers linked the custom GPT attacks to a broader campaign involving at least 40 incidents, although they confirmed custom GPT involvement in only two. The scheme combines sponsored Google results, a legitimate ChatGPT page, and a…
-
Security researchers have demonstrated Branch Target Reuse, a Spectre v2 variant that exposes sensitive information through outdated processor predictions. In Linux experiments on two Intel architectures, the team recovered a root password hash within three to five minutes on average. The result does not mean attackers can instantly obtain the password itself. However, a stolen…
-
A Kiteworks security patch has addressed a critical vulnerability following a precautionary shutdown of customer systems. The company has lifted its shutdown recommendation and says monitoring found no evidence of compromise or suspicious activity. Shutdown Recommendation Ends After Threat Review Kiteworks initially urged customers to take their systems offline after federal intelligence authorities warned of…
-
Apple has released security updates to address an Apple CoreGraphics flaw that may have helped attackers target specific iOS users. The vulnerability can allow malicious files to trigger arbitrary code execution, according to the company’s security notice. Malicious Files Can Trigger Code Execution CoreGraphics handles graphics, image rendering and text drawing across several Apple operating…
-
A Keio ransomware attack has disrupted business systems at the Japanese railway and hotel group. The company disconnected its network after discovering the intrusion on September 26, while initial reports point to hospitality disruption rather than railway operations. Hotel Services Face Possible Delays Keio Plaza Hotel Tokyo warned customers that some services could experience delays…
-
A former US Army soldier has received a 70-month prison sentence for hacking and extorting technology and telecommunications companies. The soldier cyber extortion case involved at least 10 US businesses and ransom demands totalling at least $1 million. Cameron John Wagenius, 21, must also pay $294,978 in restitution. His criminal activity ran from April 2023…