Microsoft quietly extends free Windows 10 security updates to October 2027
Microsoft has pushed back the end-of-life date for free Windows 10 Extended Security Updates by another year, now covering devices…
Security
Cybersecurity, vulnerabilities, threats, and defense
PirloTV Sports Piracy Network Hit as 44 Domains Seized
A major sports piracy operation tied to the illegal PirloTV streaming platform has been disrupted. Authorities targeted 44 domains that…
macOS Malware ‘Gaslight’ Uses Fake Errors to Trick AI Analysis Tools
A newly discovered macOS malware called “Gaslight” is doing something novel — it’s not trying to evade antivirus. It’s trying…
AI and Liability: Why Companies Can’t Blame Their Chatbots
A German court ruled earlier this month that Google is on the hook for its AI search summaries. The court…
This Week in Threats: Smart TV Proxyware, a 24-Year curl Bug, and Edge Browser Malware
The weekly threat roundup reads like a catalog of cheap shots. Old credentials still working. Trusted apps doing sketchy things….
Account Takeover Attacks Still Outmatch Defenses — Here’s Why
Organizations keep pouring money into phishing defenses, identity protection, and multi-factor authentication. Account takeover attacks keep succeeding anyway. The gap…
Prompt Injection Is a Role Confusion Problem — And There’s No Easy Fix
A new research paper argues that prompt injection vulnerabilities in LLMs stem from a fundamental issue: the models can’t reliably…
NIST opens updated IoT security guidance for public review
NIST is asking for public feedback on its updated IoT security guidelines. The revised document, SP 800-213 Revision 1, aims…
145 Mastra npm packages compromised through hijacked contributor account
A massive supply chain attack has hit the Mastra AI framework. One hundred and forty-five npm packages under the @mastra/*…
The 10 Most Common Attack Surface Exposures in 2026
Breaches don’t always start with a zero-day. Sometimes it’s an admin panel that never should have been public, or a…