Articles & Guides

Articles & Guides

All 576 Featured 15 Articles 574 Guides 2

Showing 15 of 576 posts · RSS

A 9 Year Old Logic Flaw in the Linux Kernel's ptrace Path Just Got Disclosed as CVE-2026-46333—Qualys Has Four Working Exploits That Read /etc/shadow, Steal SSH Host Keys, and Run Commands as Root on Default Debian, Ubuntu, and Fedora

A 9 Year Old Logic Flaw in the Linux Kernel's ptrace Path Just Got Disclosed as CVE-2026-46333—Qualys Has Four Working Exploits That Read /etc/shadow, Steal SSH Host Keys, and Run Commands as Root on Default Debian, Ubuntu, and Fedora

May 22, 2026 · 11 min read

A Chinese APT Named Calypso Has Been Hiding Inside a Middle East Telecom Since Mid 2022 With a Linux Backdoor That Just Got Discovered—and Its First Job Was to Be a Proxy for Other Attacks

A Chinese APT Named Calypso Has Been Hiding Inside a Middle East Telecom Since Mid 2022 With a Linux Backdoor That Just Got Discovered—and Its First Job Was to Be a Proxy for Other Attacks

May 22, 2026 · 10 min read

Texas and Florida Lost $90 Million to Crypto ATM Scams Last Year—78% of the Money Came From People Over 50, Lured to the Kiosk by an Email or Phone Call

Texas and Florida Lost $90 Million to Crypto ATM Scams Last Year—78% of the Money Came From People Over 50, Lured to the Kiosk by an Email or Phone Call

May 22, 2026 · 10 min read

Europol Just Seized 33 Servers and Quietly Read the Traffic of 'First VPN' Users for Months Before Pulling the Plug—506 Criminals Got a Pop Up Telling Them They Had Been Identified

Europol Just Seized 33 Servers and Quietly Read the Traffic of 'First VPN' Users for Months Before Pulling the Plug—506 Criminals Got a Pop Up Telling Them They Had Been Identified

May 22, 2026 · 10 min read

Snapchat, Roblox, and Meta Just Promised Ofcom They Will Change Their Apps to Protect UK Children—YouTube and TikTok Said Their Existing Features Were Already Enough

Snapchat, Roblox, and Meta Just Promised Ofcom They Will Change Their Apps to Protect UK Children—YouTube and TikTok Said Their Existing Features Were Already Enough

May 22, 2026 · 9 min read

SonicWall Patched This VPN Bug—But If You Did Not Run Six Extra Manual Steps, Attackers Can Still Bypass Your MFA With 13 Brute Force Attempts and Reach a File Server in Under 30 Minutes

SonicWall Patched This VPN Bug—But If You Did Not Run Six Extra Manual Steps, Attackers Can Still Bypass Your MFA With 13 Brute Force Attempts and Reach a File Server in Under 30 Minutes

May 22, 2026 · 10 min read

Apple Just Said It Blocked $2.2 Billion in App Store Fraud Last Year—1.1 Billion Fake Accounts, 193,000 Banned Developers, and 11.2 Billion Stopped Since 2020

Apple Just Said It Blocked $2.2 Billion in App Store Fraud Last Year—1.1 Billion Fake Accounts, 193,000 Banned Developers, and 11.2 Billion Stopped Since 2020

May 22, 2026 · 9 min read

A Rutgers Study of 1,201 Hospitals Found That Putting a Facebook or Google Tracking Pixel on Your Site Makes a Breach 46% More Likely—And 66% of US Hospitals Still Do It

A Rutgers Study of 1,201 Hospitals Found That Putting a Facebook or Google Tracking Pixel on Your Site Makes a Breach 46% More Likely—And 66% of US Hospitals Still Do It

May 22, 2026 · 9 min read

An Undocumented Huawei Zero Day Knocked Out Every Phone in Luxembourg for Three Hours Last July—And Ten Months Later There Is Still No CVE, No Patch, and No Statement From the Vendor

An Undocumented Huawei Zero Day Knocked Out Every Phone in Luxembourg for Three Hours Last July—And Ten Months Later There Is Still No CVE, No Patch, and No Statement From the Vendor

May 21, 2026 · 9 min read

The FTC Just Sent Warning Letters to Meta, Apple, Google, TikTok, and Eight Others—You Now Have 48 Hours to Remove Intimate Images or Pay $53,088 Per Violation

The FTC Just Sent Warning Letters to Meta, Apple, Google, TikTok, and Eight Others—You Now Have 48 Hours to Remove Intimate Images or Pay $53,088 Per Violation

May 21, 2026 · 9 min read

A China Linked Group Just Spent Two Years Running Its Malware Through Discord and Microsoft OneDrive—Because There Is No Suspicious Domain to Block When the C2 Is Microsoft's Own API

A China Linked Group Just Spent Two Years Running Its Malware Through Discord and Microsoft OneDrive—Because There Is No Suspicious Domain to Block When the C2 Is Microsoft's Own API

May 21, 2026 · 9 min read

Researchers Showed That a USB Drive, a Reboot, and Holding CTRL Bypass BitLocker on a Locked Windows 11 Laptop—Microsoft Has No Patch, Only Mitigations

Researchers Showed That a USB Drive, a Reboot, and Holding CTRL Bypass BitLocker on a Locked Windows 11 Laptop—Microsoft Has No Patch, Only Mitigations

May 21, 2026 · 9 min read

A CISA Contractor Turned Off GitHub's Secret Detection On Purpose, Then Pushed AWS GovCloud Admin Keys and Plaintext Passwords to a Public Repo for Six Months

A CISA Contractor Turned Off GitHub's Secret Detection On Purpose, Then Pushed AWS GovCloud Admin Keys and Plaintext Passwords to a Public Repo for Six Months

May 21, 2026 · 9 min read

Drupal Just Patched a Bug That Lets Any Anonymous Visitor Run Arbitrary SQL Against the Million Sites Running on PostgreSQL—No Authentication, No Login, No Plug In Required

Drupal Just Patched a Bug That Lets Any Anonymous Visitor Run Arbitrary SQL Against the Million Sites Running on PostgreSQL—No Authentication, No Login, No Plug In Required

May 21, 2026 · 9 min read

Microsoft Just Killed the Service That Turned Its Own Azure Code Signing Platform Into a Malware Laundry for Five Ransomware Gangs—at $9,000 a Subscription

Microsoft Just Killed the Service That Turned Its Own Azure Code Signing Platform Into a Malware Laundry for Five Ransomware Gangs—at $9,000 a Subscription

May 21, 2026 · 9 min read