Critical Paperclip Flaw Allowed Admin Access, Code Execution
An authorization bypass in Paperclip could have allowed remote attackers to obtain arbitrary code execution with the server’s permissions, Oasis Security reports. Paperclip is an…
Latest Cybersecurity News — Page 319
View all →
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog
U.S. CISA adds a JetBrains TeamCity flaw to its Known Exploited Vulnerabilities catalog Pierluigi Paganini August 06, 2026 U.S. Cybersecurity and Infrastructure Security Agency (CISA)…
Despite federal warnings, thousands of U.S. industrial controllers used in water systems remain exposed online
A new scan of internet-connected industrial equipment found over 4,000 Rockwell Automation and Allen-Bradley controllers exposed online, including 22 in cities impacted by cyberattacks on…
Barracuda warns calendar invites are being used for phishing via .ics files
Barracuda researchers are warning organisations to treat calendar invitations as a phishing risk, as attackers increasingly abuse iCalendar (.ics) files to bypass controls that focus…
Why exposure management is replacing vulnerability management
Vulnerability management isn’t failing because security teams lack visibility. Most organizations already have more findings than they can reasonably address. Yet despite all those findings,…
Wiz Brings Automated DISA STIG Assessment to Amazon Linux 2023 and Windows Server 2025
The challenge: STIG compliance without automation For federal agencies and defense contractors operating in AWS GovCloud, Amazon Linux 2023 and Windows Server 2025 are rapidly…
8 Ways AI is Changing Threat Intelligence
The fundamentals haven’t changed — the clock speed has. Defending everything is still the job, but adversaries can now move at machine-speed, which means the…
OpenAI rolls out a major ChatGPT upgrade, even if you don’t pay for it
OpenAI is rolling out a more reliable version of ChatGPT GPT-5.6 Sol for Plus and Pro users, while Free users are getting unlimited text chats with…
4,400+ Internet-Exposed Rockwell PLCs Expose Water Systems to Cyberattacks
A wave of cyberattacks against U.S. water and wastewater utilities has renewed alarm over how many industrial controllers remain directly reachable from the public internet.…
Hackers Stalked Me by Hijacking a Smartwatch for Kids
The watch’s insecurity and the spying it enabled might be expected given the gadget’s pedigree: It’s sold by an obscure company called CJC, costs less…
Best Protective DNS Services Compared (2026): Pricing
Protective DNS is the rare control where the cheap options are genuinely good so this comparison leads with value. The verdict: DNSFilter is the best…
Novel-reading apps used users’ phones to generate fake ad traffic
A new mobile ad fraud scheme, dubbed Papyrus, is using a cluster of novel-reading apps to generate hidden browser traffic, according to IAS Threat Lab.…