Flash Loan Attack Vector Analysis: HTX
Flash Loan Attack Vector Analysis: HTX Target Protocol: HTX (TVL: $4146.4M) HTX – Flash‑Loan Attack‑Vector Technical Security & Audit Report Prepared by: [Yo...
🔒
Cybersecurity News
The latest cybersecurity news — data breaches, zero-days, ransomware, CVEs and threat intelligence. Aggregated from Krebs on Security, Bleeping Computer, The Hacker News and more.
80 articles · Updated just now · Browse all categories
China's AI Export Draft Spares API Calls and Public Weights. Overseas Deploys Aren't
Book: AI Agents Pocket Guide Also by me: Thinking in Go (2-book series) — Complete Guide to Go Programming + Hexagonal Architecture in Go My project: Hermes ...
Prioritizing the six DolphinScheduler CVEs: severity, exposure and patch order
Prioritizing the six DolphinScheduler CVEs: severity, exposure and patch order The published ratings Apache rates one of the six flaws critical, two importan...
Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw...
Researchers say an ad platform could identify targets and install spyware through online ads, no click needed
A new investigation by Citizen Lab has uncovered a large-scale covert operation designed to install spyware through online advertising. Dubbed "AdFection" by...
AI names fall as the Nasdaq comes under fresh pressure
The pressure is back on tech stocks today, led by CoreWeave once again.The market continues to smell a rat in the neocloud space and it's being joined by som...
Zero-click attacks used targeted ads to deliver Candiru spyware
Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering t...
October Patch Tuesday: 1,408 CVEs, 1 exploited flaw and a SharePoint surprise
Microsoft’s October 2026 Patch Tuesday is the year’s largest release, with 1,408 CVEs requiring customer action, 72 of them rated critical. September, the pr...
Ad
Microsoft’s Patch Tuesday updates: Keeping up with the latest fixes
Long before Taco Tuesday became part of the pop-culture vernacular, Tuesdays were synonymous with security — and for anyone in the tech world, they still are...
OpenAI Saudi national bugging case shows threat to U.S. leadership in AI: DNI Clayton
AI "amplifies" existing cybersecurity risks toward U.S. digital infrastructure, Clayton said on "Squawk Box."
Microsoft exposes how USDT-funded phishing network targeted 75,000 organizations
Domain seizures and account shutdowns hit YAM Store and phishing-kit services, while reported asset freezes remain unquantified. Read the full story on Crypt...
Xbow spent $40K on AI and cracked Google Chrome wide open
A chain of vulnerabilities in Google’s Chrome browser could have enabled researchers to take control of one billion Windows machines worldwide — and it cost ...
Fake calendar invites hit thousands of businesses in Microsoft credential phishing campaign
Hundreds of thousands of spam emails are carrying .ics attachments or calendar invites.
How Israeli firm’s ‘zero-click’ malware attack poses global security risk
A new ‘zero-click’ hack uses ads to target victims without any action needed on their part.
When Your Ransomware Negotiator Works for the Other Side
The shocking arrest of a well-known ransomware negotiator reveals the critical need for vendor program oversight.
IPVanish has launched its Black Friday VPN deals for 2026 — old lower prices on its new look plans
Save on Next Gen Antivirus, sSim data and 1TB of encrypted cloud storage
Ad
Burger King Japan data breach exposes 11 million customer records
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing ...
investingLive European session wrap: Dollar slips as stocks steady and yields edge a little higher
Headlines:Gold shrugs off hot inflation data as market focus may be shifting to growth concernsHow have interest rate expectations changed after this week's ...
Scammer gets scammed in Ledger spy-chip exploit, loses almost $5 million in bitcoin
Chainalysis says a fraudster who tricked people through fake online jobs became one of the biggest victims of the compromised hardware wallets.
Ledger, Again: Another Attack, Another Phishing Wave: How Can Users Protect Themselves?
As Ledger is past the supply chain incident, scammers aren't giving up on opportunity to steal even more money from investors.
No need to pay monthly for cloud storage — 20TB of Scramble is a flat $349.95
Get 20TB of lifetime Scramble Cloud storage for $349.95 (reg. $1,440), featuring end-to-end encryption, secure file sharing, WebDAV access, and no monthly fees.
China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers
The China-nexus cyber espionage group tracked as Armory Castle (previously UNC5221 or Warp Panda) exploited a newly disclosed security flaw in BeyondTrust Re...
BeyondTrust patches zero-day exploited in attacks since August
BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. [...
PEERSTITCH Malware Deployed via FortiOS Flaw Bypasses Checks on Tagged VPN Sessions
A suspected advanced threat actor has been observed exploiting a security flaw in Fortinet FortiOS to deliver a previously unreported memory-resident ARM64 m...
Ad
No click required: How the ad industry became a pipeline for mercenary spyware
That ad you just scrolled past on your phone but barely spared a look or click? It could be tracking your movements and collecting your data, without you hav...
Proofpoint agrees to buy data security company Varonis for $6.3B in cash
Months of speculation over the future of data security company Varonis Systems Inc. ended today when Thoma Bravo-owned cybersecurity firm Proofpoint Inc. agr...
SecTor 2026 Reveals a Rapidly Shifting Cybersecurity Landscape
The event closed in Toronto last week, with experts sharing critical perspectives on emerging risks, drawing record attendance and marking 22% growth.
Google Says It Just Cracked One of Quantum Computing's Biggest Bottlenecks
Google's Willow chip cut errors 40x on the scarce “magic states” quantum computers burn through, a step toward smaller, useful machines—and toward ones that ...
AI Slop Isn't Just for Social Media; It's Ruining Cyberattacks, Too
Don't buy the hype! AI has been dumbing down cyberattacks, and serious threat actors are barely touching it.
Targeted ads delivered 0-click exploits to install mercenary malware
The incident is likely 1st confirmation of mercenary spyware delivered by targeted ads.