Update Chrome and ChromeOS to fix critical security issues
Google has released updates for the Chrome browser and the ChromeOS operating system. On October 6, Google released a Stable Channel Update for Desktop. This is…
Year: 2026
Eight Malicious npm Packages Downloaded 40,767 Times Deliver Overlord RAT and Stealer
Ravie LakshmananOct 07, 2026Supply Chain / Malware Cybersecurity researchers have disclosed details of a long-running npm supply chain malware campaign that pushes information stealers and…
AI may be driving more software developers to freelance
The proportion of software developers now working as freelancers has increased by six percentage points compared with last year, according to the latest survey of…
Microsoft brings more AI to PCs
Microsoft has unveiled an AI coding model that can run directly on personal computers and new security technology to prevent AI agents from accessing data…
Hadrian Raises $40 Million to Expand Autonomous Offensive Security Platform
Attackers use AI to locate and exploit vulnerabilities at machine speed; Hadrian offers an agentic offensive security platform that allows defenders to operate at the…
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances
SonicWall Fixes Max Severity Pre-Auth Flaw in SMA1000 Appliances Pierluigi Paganini October 07, 2026 SonicWall patched a CVSS 10 pre-auth SSRF flaw in SMA1000 appliances…
FBI warns that FortiBleed credential-harvesting attacks are locking out firewall users
An initial access broker is working with various ransomware groups in a global campaign. Source link
Major rules for federal contractors handling sensitive data are nearing the finish line
Federal government contractors that handle sensitive information could soon face a “sea change” in rules about how they protect that information and report when it…
Denmark’s national ID system breach exposes personal data of 8.8M
Denmark is reviewing security controls around its national citizen registry after unauthorized parties exploited a company’s access credentials to harvest records on approximately 8.8 million…
How the Wiz Red Agent caught data exposure
At a Fortune 500 firm, a public web page was quietly serving sensitive data tied to one of the company’s business units. No breach alert.…
Up a Creek Without a Command Line: Mapping an Akira Ransomware Attack
Acknowledgments: Special thanks to Dray Agha for his extensive contributions to this investigation. Background In September, the Huntress agent was deployed on an organization that…
Hackers hijack Google domains after breaching ccTLD registries
Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, American Samoa, and Sierra Leone…