Linux rootkits explained – Part 1: Dynamic linker hijacking
Rootkits are a type of malware used by threat actors to gain complete control over a compromised resource and hide malicious activity. They are often…
Year: 2026
Malware Indicators of Compromise (IoCs)
One malware hash can turn a vague alert into a concrete investigation. Analysts can search endpoints for the exact file, trace where it appeared, and…
Business Leader First, CMO Second with Tracey Moon of BlackCloak
Episode Summary: Tracey Moon is a multi-time CMO and currently leads marketing at BlackCloak, a company that protects executives and their families in their personal…
Ghostscript flaw lets hackers hijack servers via PDF uploads
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution through specially crafted PDF files. The flaw…
Microsoft Windows Shell 0-Day Vulnerability Actively Exploited in Attacks
Microsoft has patched an actively exploited Windows Shell zero-day vulnerability that allows attackers to bypass Mark of the Web protections. Tracked as CVE-2026-96951, the flaw…
SAP Patches Critical NetWeaver and S/4HANA Security Flaws Affecting Enterprise Systems
SAP’s Security Patch Day on October 13, 2026, addresses critical vulnerabilities found in enterprise applications, integration platforms, and developer libraries. The October bulletin details the…
MS Teams Phishing, ClickFix and Shai-Hulud npm Attacks Dominate Threat Report
Ontinue’s 1H 2026 threat report shows attackers increasingly abusing Microsoft Teams, npm packages, device-code logins and blockchain ClickFix tactics to steal access and spread malware.…
GitLab admins urged to patch critical RCE flaw (CVE-2026-97229)
GitLab is urging users of self-managed instances to patch a critical vulnerability (CVE-2026-97229) in its CI/CD Regular Expression Compiler that could allow remote attackers to…
OpenAI Employee Arrested for Allegedly Planting Hidden Recorder in Executive Conference Room
A Saudi National and employee of OpenAI has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s…
Journalists subject to unlawful surveillance seek legal costs after ‘unreasonable conduct’ by PSNI
Two Belfast journalists who were placed under unlawful police surveillance are seeking costs following allegations of “unreasonable behaviour” by the Police Service of Northern Ireland…
Kogan taps AI agent to handle customer service
Key points Kogan has rearchitected its customer service bot using Salesforce’s Agentforce technology after an initial deterministic bot only resolved about six percent of inbound…
Employee Arrested After Listening Device Found in OpenAI Conference Room, FBI and the Company Say
An engineer at OpenAI has been charged with secretly installing a recording device inside a conference room in what officials said Tuesday was an effort…