New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitch
A memory corruption flaw in the Linux kernel’s Open vSwitch datapath gives ordinary local users a path to root on a broad set of default-configured…
Month: August 2026
Chi Onwurah pushes to curb digital twins of real people
Chi Onwurah, chair of the Science, Technology and Innovation Select Committee, has said she is bringing a bill to Parliament to stop companies from developing…
Secure Cloud Foundation For AI: A Guide For Enterprises
Amarbir Singh, Senior Director – AI & Cloud Solutions, AHEAD Building a secure cloud foundation for AI has become a top priority as enterprises move…
iTnews Executive Retreat – Security Leaders Edition
Security leaders operate in one of the most demanding roles in technology. Between navigating an evolving threat landscape, managing organisational risk and leading high-performing teams,…
New Attack Methods Enable Malware to Hijack Passkey-Protected Accounts
Palo Alto Networks researchers have disclosed the details of new attack methods targeting passwordless authentication, showing how malware can hijack a passkey-protected account. Passkeys are…
AI is getting better at election facts, but voters shouldn’t rely on it
Like seemingly everything else these days, artificial intelligence will re-shape the way voters gather information on candidates running in the 2026 midterm elections. In some…
One C2 kit. 30 customers. 2 governments
I was mapping the command-and-control infrastructure behind a state-linked intrusion set when the query came back and effectively ended the exercise I thought I was…
Announcing Cloudflare Wallets: The programmable wallet for the agentic Internet
Today, it is difficult for AI agents to try out new APIs. They often have to navigate through a login page designed for humans and…
Phishing service spoofs RingCentral to steal Microsoft 365 accounts
The Greatness phishing-as-a-service (PhaaS) platform has expanded from credential phishing to adversary-in-the-middle attacks and device-code phishing targeting Microsoft 365 accounts. The platform has been active…
Remote Scheduled Tasks Spread EtherRAT Across Compromised Windows Domain
EtherRAT has surfaced in a Windows domain intrusion tied to an affiliate of the Gentlemen ransomware operation. The campaign shows how a single foothold can…
TP-Link Zero-Touch Provisioning vulnerabilities – IT Security Guru
Forescout Vedere Labs research has uncovered 15 previously unknown vulnerabilities affecting TP-Link’s Omada Zero-Touch Provisioning (ZTP) ecosystem, warning that weaknesses in automated device deployment could…
Fake Open VSX Extensions Hijack AMD, Azure, Salesforce and Government Namespaces
Fake Open VSX extensions have hijacked high‑trust namespaces like AMD, Azure, Salesforce, Hyperledger, and a U.S. government agency on the Open VSX Registry, silently harvesting…