NSO Group Caught Phishing WhatsApp Users in Violation of Court Order
WhatsApp has caught the NSO Group—the Israeli spyware firm behind Pegasus—running phishing attacks against its users, in what appears to…
Account Security
Microsoft Confirms Some Windows 11 Machines Can’t Install Latest Updates
Microsoft has issued a warning: if you upgraded your PC to Windows 11 24H2 or 25H2, you might be hitting…
New Windows Zero-Day ‘RoguePlanet’ Hits Microsoft Defender to Escalate Privileges
A freshly disclosed Windows zero-day dubbed “RoguePlanet” is making the rounds, and the mechanism is clever. The exploit targets a…
CISO Forum Kicks Off Mid-Year Check-In on Shadow AI Risks
The CISO Forum is running a webinar today walking security leaders through the biggest infosec challenges of 2026 so far,…
Data Center Power and Cooling Systems Riddled with Security Holes
Security researchers at Claroty have dug into the firmware and network management interfaces running two pieces of critical infrastructure kit…
Fortinet and Ivanti Ship Emergency Patches for Critical Command Injection Bugs
Both Fortinet and Ivanti have released urgent updates addressing critical OS command injection vulnerabilities that can be exploited remotely, without…
AI Budgets Are Growing — But So Are the Identity and Data Security Risks
As organizations pour more money into AI initiatives, a familiar tension is resurfacing: how do you move fast on innovation…
ServiceNow Quietly Patches Flaw That Was Already Being Exploited Against Customers
ServiceNow has pushed out a fix for a security vulnerability that was actively being exploited against some of its hosted…
Microsoft Plugs Three Zero-Days in Patch Tuesday, Including SYSTEM Escalation Flaws
Microsoft rolled out fixes for three zero-day vulnerabilities this Patch Tuesday, two of which let attackers escalate to SYSTEM privileges…
Meta’s Own AI Support Tool Got 20,000 Instagram Accounts Hijacked
Attackers abused Meta’s AI-powered High Touch Support tool to hijack over 20,000 Instagram accounts, exploiting a missing email verification check to bypass 2FA and access passwords, DMs, and personal data for over six weeks before detection.
- 1
- 2