Telegram Desktop Flaw Lets Hidden JavaScript Exfiltrate Messages From HTML Exports
A flaw in Telegram Desktop let a bot’s message plant hidden JavaScript inside chats that users exported to HTML files, security researchers at ExPatch said…
Latest Cybersecurity News — Page 78
View all →
Finnish government AI plan puts thousands of public sector jobs at risk
The Finnish government has launched a politically contentious plan to transform the country’s entire public sector into an artificial intelligence (AI)-powered system by 2031. With…
Former US regulator says AI companies not exempt from current law
Key points Lina Khan has warned that AI companies have no exemption from existing law over models that disrupt other organisations’ systems. OpenAI has admitted…
The Race to Control AI and Protect What Makes Us Human
A current debate is whether artificial intelligence (AI) is a force for good or bad; or perhaps both. What follows is the argued opinion of…
U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog
U.S. CISA adds GitLab, JFrog Artifactory, and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog Pierluigi Paganini September 14, 2026 U.S. Cybersecurity and Infrastructure Security…
Supreme Court denies Trump request to allow USPS mail ballot changes
The Supreme Court has rejected a petition by the Trump administration to implement changes to the way the U.S. Postal Service handles mail-in ballots for…
KAIperShield and Cyber in Space form Indo-Pacific partnership on mission-focused cyber resilience
KAIperShield and Cyber in Space have signed a business development and customer engagement agreement aimed at expanding access to cyber resilience and mission assurance capabilities…
A maximum severity GitLab flaw could turn your CI/CD server into an attacker’s treasure trove
Beyond patching, the watchTowr Intel team said defenders should try to identify exploitation attempts by hunting through log files for HTTP POST requests to “/api/v4/projects/{id}/repository/commits/”…
AWS Security Reference Architecture: A deep dive into PCI DSS compliance
Amazon Web Services (AWS) is excited to announce the publication of the AWS Security Reference Architecture (AWS SRA) Payment Card Industry (PCI) Data Security Standard…
500ms to midnight: XZ A.K.A. liblzma backdoor
Key Takeaways li]:list-disc”> Stage 0: The initial malicious code additions attempt to decode the Stage 1 script (hidden code segments) by changing byte values from…
Japan’s Digital Agency says VPN flaw exposed 246,000 personnel records
Japan’s Digital Agency has discovered a data breach that may have exposed around 246,000 record rows containing personal information of government employees. The agency says…
Hackers Mass-Scan Exposed Vite Servers to Steal AWS and Azure Cloud Credentials
Hackers are conducting a large-scale automated scanning campaign against internet-exposed Vite development servers, attempting to steal AWS credentials, Azure access tokens, environment variables, and Infrastructure-as-Code…