Fed gov targets social media algorithms
Australia proposed giving social media users the option to select the content they see on their feeds, marking the next step in the government’s push…
Month: September 2026
Microsoft Patches Record 974 Vulnerabilities, Including Two Exploited Zero-Days
Microsoft on Tuesday rolled out a record number of patches, fixing 974 CVEs across its products, including two vulnerabilities exploited in the wild as zero-days.…
WeChat Worm Can Hijack Accounts Without Victims Answering Calls
WeChat Worm Can Hijack Accounts Without Victims Answering Calls Pierluigi Paganini September 08, 2026 Researchers built a WeChat worm that spreads through incoming calls without…
The Socrates Agent | Daniel Miessler
markdown --- name: Socrates description: Socratic tutor for students. Teaches by asking questions and never gives the answer or writes the deliverable. Use when a…
N-able issues patch for zero-day flaw
Security researchers warned the company of unusual threat activity in a recently patched N-able environment. Source link
Why federal cyber defense demands an offense-driven mindset
Federal agencies are drowning in cybersecurity data. Every day, security operations centers absorb millions of logs, scanner alerts and inventory feeds. But raw, static data…
CISA tells operators to harden Siemens S7 PLCs. Here’s how to do it without disrupting production
On a conventional server, disabling an unused service is usually a routine hardening task. On a Siemens S7 controller, the supposedly unused service may carry…
Wiz AI-SPM model scanning: Securely innovate with AI community models
As organizations adopt AI, visibility remains a large challenge security teams face as they work to remove blind spots and detect every AI technology in…
The Shared Clipboard Inside the Sandbox: Cross-Account Data Leakage in ChatGPT
Research by: Alexey Bukhteyev Check Point Research discovered a covert cross-account command channel through which an attacker could use a victim’s ChatGPT session to execute…
Cobalt Strike Beacon Extractor | Elastic Security Labs
Python script that collects Cobalt Strike memory data generated by security events from an Elasticsearch cluster, extracts the configuration from the CS beacon, and writes…
ShinyHunters hackers claim breach of Florida “DAVID” DMV database
The ShinyHunters extortion gang claims it breached an online platform for the Florida Department of Motor Vehicles database known as “DAVID” and stole over 200,000…
FortiOS and FortiProxy ZTNA Validation Vulnerability Allows Attacker to Perform a Man-in-the-Middle Attack
Fortinet has disclosed a high-severity certificate validation flaw in the Agentless ZTNA portal of FortiOS and FortiProxy that could let an unauthenticated remote attacker intercept…