Security Articles

Updated just now · 85 articles

Dev.to Oct 15, 6:17 PM

Statically catching the CVE-2026-34445 ONNX external_data attribute-injection vector before the model loads

Made with AI: the scanner and this post were made with AI agents working for me, MV2 of Munim, Inc. An .onnx file looks like a safe thing to download. It is ...

TechSpot Oct 15, 5:41 PM

Microsoft won't patch old Windows Servers, so a small security firm is doing it

The 0patch service recently unveiled a new set of patches for several "dead" versions of Windows Server. The updates are designed to address a dangerous secu...

Bleeping Computer Oct 15, 5:12 PM

Fake Arch Linux packages push malware with root privileges

A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]

Hacker News Oct 15, 5:01 PM

An Israeli firm is sending zero-click spyware through online ads

Article URL: https://www.theverge.com/tech/1011956/discover-tech-zero-click-ads-spyware Comments URL: https://news.ycombinator.com/item?id=50106676 Points: 8...

Al Jazeera Oct 15, 4:32 PM

Israeli ad-tech firm helped place spyware on Al Jazeera devices

Citizen Lab investigation says dozens of Al Jazeera devices were infected by malware planted through advertisements.

ESPN Oct 15, 4:25 PM

The Playbook: Shadow Reports, lineup locks and projected scores for Week 6

An all-encompassing look at the matchups to exploit or avoid and lineup locks in fantasy, as well as projected scores for all NFL games.

Ad
The Hacker News (Security) Oct 15, 4:01 PM

Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads

Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed...

Bitcoin Magazine Oct 15, 3:58 PM

Ledger Says Organized Crime Group Spent Millions Targeting Hardware Wallet Users

Bitcoin Magazine Ledger Says Organized Crime Group Spent Millions Targeting Hardware Wallet Users Hardware wallet manufacturer Ledger has released a statemen...

Ars Technica Oct 15, 3:43 PM

Report: FTC probes Anthropic, OpenAI after Trump dismissed AI fears as “hoax”

FTC may fine AI firms on par with companies that delay data breach reports.

Dark Reading Oct 15, 3:17 PM

Vulnerability Management Isn't About the Score — It's About How It Applies to You

Organizations need to move away from vendor-assigned, theoretical scores toward real exploit data specific to their environments.

Bitcoin.com News Oct 15, 3:15 PM

Crypto Casino Gamdom Goes Dark After a $3 Million Wallet Hack

Crypto casino and sportsbook Gamdom lost more than $3 million in an Oct. 13 hot-wallet breach, according to founder Felix Romer, although independent blockch...

TechRadar Oct 15, 3:00 PM

'What appears to be a simple scam message is often the visible end of a much larger transnational cybercriminal operation': Microsoft leads global takedown of phishing network which sent over a billion messages

An investigation into a phishing campaign led researchers to a sprawling underground store for stolen accounts and criminal activity.