Zoom zero-click RCE flaws allow attackers to compromise meeting participants
“The entire operation, from finding the flaw to building a working exploit, was carried out by A [Security] using fewer than 20 prompts on publicly…
Latest Cybersecurity News — Page 147
View all →
DEF CON crowd suspected in fake-hotspot attack on Delta flight
Morgan Durrant, a Delta spokesperson, confirmed the details to Ars. “One initial finding is an unauthorized WiFi network, which was not provided, operated, or supplied…
Landing Zone Accelerator Independent Assessment Report for C5:2020 now available on AWS Artifact
Organizations operating in Germany and across Europe increasingly need to demonstrate cloud security compliance under the Cloud Computing Compliance Criteria Catalogue (C5:2020), published by Germany’s…
DeadLock ransomware uses blockchain to resist infrastructure takedown
The DeadLock ransomware operation is using a decentralized infrastructure that relies on blockchain-backed services to protect its communication with victims and data-leak activity. The threat…
Zoom Zero-Click Vulnerabilities Allow Meeting Participants to Hijack Other Users’ Devices
Zoom has rolled out patches for four newly disclosed security flaws that could let a malicious meeting participant remotely execute code on another attendee’s computer,…
Security Theatre: Busy Metrics in the SOC are a Great Show, but Terrible Defense
Unfortunately, many security professionals still consider noisy SOC metrics the best benchmarks for performance. I call this “activity theater”—a lot of show, but no real sustenance.…
Microsoft Plugs Nearly 400 Security Holes – Krebs on Security
Microsoft today released updates to remedy at least 398 security vulnerabilities in its Windows operating systems and supported software, including one weakness that is already…
23 Copeland XWEB Pro Vulnerabilities Let Attackers Gain Root Access and Manipulate Refrigeration Systems
Security researchers have discovered 23 vulnerabilities in Copeland’s XWEB Pro commercial refrigeration controllers, with 21 rated as high severity. These vulnerabilities could allow unauthenticated attackers…
Locking your ssh-agent exposed local-only keys until OpenSSH 10.5
Lock your ssh-agent and it should sit there refusing to sign anything until you unlock it. In OpenSSH 10.4, locking it also switched off the…
Fake CCleaner installs GhostDesk Chrome spyware
A fake version of the popular PC cleaning tool CCleaner is being used to infect Windows users with a malicious Chrome extension called GhostDesk, which…
Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack
Swati KhandelwalAug 11, 2026Vulnerability / Windows Security Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being…
Super funds to test coordinated cyber attack response
GNGB chief executive Michelle Bower said the exercise had become a bellwether for cooperation across the sector on cyber preparedness. The Gateway Network Governance Body…