AWS STS simplifies session token size limits and adds session token size monitoring
AWS Security Token Service (AWS STS) has simplified session token size limits, giving you more room for your session policies and session tags. STS has…
Month: September 2026
Getting gooey with GULOADER: deobfuscating the downloader
Overview Elastic Security Labs continues to monitor active threats such as GULOADER, also known as CloudEyE – an evasive shellcode downloader that has been highly…
Acronis warns of actively exploited flaw in its cPanel backup plugin
Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in…
Apple Rolls Out Massive Security Update Fixing 273 Vulnerabilities Across Its Devices
Apple has released one of its largest coordinated security rollouts, addressing 273 distinct critical vulnerabilities across iPhone, iPad, Mac, Apple Watch, Apple TV, Vision Pro,…
Hackers Actively Exploit Critical WooCommerce Plugin Vulnerability to Upload PHP Backdoors
Threat actors are actively exploiting a critical vulnerability in the WooCommerce Wholesale Lead Capture plugin that lets unauthenticated attackers upload malicious PHP files and potentially…
Cisco patches actively exploited email gateway zero-day (CVE-2026-76461)
Attackers have leveraged a zero-day SQL injection vulnerability (CVE-2026-76461) to compromise Cisco Secure Email Gateway appliances, Cisco confirmed on Monday. The vendor’s Product Security Incident…
Search results are sending people to fake Bitrefill checkouts
Bitrefill is a legitimate company that sells gift cards for popular stores like Amazon, Deliveroo, Apple, Nintendo, and thousands of others. They also sell eSIMs,…
Iranian Hackers Use Telegram-Controlled Malware to Spy on Dissidents and Journalists
Cybersecurity agencies in the United States, the United Kingdom, and the Netherlands have detailed a Windows malware that they say Iran’s intelligence service uses to…
Zopa Bank launches voice-controlled banking
Customers of Zopa Bank can now use voice commands to instruct an artificial intelligence (AI)-powered personal digital banking assistant to make transactions and request advice.…
UK Cyberattack Rate Hits 38% Among Small Firms: Hiscox
Nearly four in 10 UK small firms were hit by a successful cyberattack in the past year, according to the latest Hiscox Cyber Readiness Report.…
International Meteor Organization Cyberattack Disrupts Site
The International Meteor Organization cyberattack has knocked much of the Belgium-based nonprofit’s website offline, with the organization warning that several weeks of partial downtime could…
UTS embarks on “$20 million-plus” network refresh
Key points UTS has embarked on a $20 million-plus refresh of its network and wi-fi infrastructure across every campus, engaging Nexon Asia Pacific to deliver…