Uncategorized

WeChat Zero-Click Worm Took Over Accounts on iPhone and Android via Incoming Calls 2026-09-08 at 16:47 By Researchers at the security firm Calif have built a worm that takes over a WeChat account via an incoming call and demonstrated it spreading among three test phones. The person being called does not have to answer or touch their […]

8th-grade dropout accused of blowing $240M Bitcoin haul on Ferraris and $4M club nights 2026-09-08 at 15:14 By Fox News Malone Lam and co-conspirators allegedly used social engineering to trick a cryptocurrency investor out of 4,100 Bitcoin This article is an excerpt from Latest Technology News | New York Post View Original Source

FreeIPA Flaw Chain Lets Anonymous Clients Create Reusable Administrator Credentials 2026-09-08 at 14:22 By A flaw in FreeIPA lets a client that has never logged in create a Kerberos identity of its own choosing in the directory and end up in the administrators group, Red Hat says. FreeIPA is the system that determines who may […]

Adobe Patches Magento Zero-Day Exploited to Deploy Rust Backdoor and PHP Web Shell 2026-09-08 at 12:13 By Adobe on Monday released security patches to address a maximum-severity flaw impacting Adobe Commerce and Magento Open Source that has come under active exploitation in the wild. The vulnerability, now tracked as CVE-2026-75650 (CVSS score: 10.0), has been codenamed StyleSmuggler […]

BengalSEO Poisons Bing Search Results to Deliver MayaBot and Tech Support Scams 2026-09-08 at 11:43 By Cybersecurity researchers have disclosed details of a sprawling search engine optimization (SEO) poisoning campaign that paves the way for malware deployment and tech support scams. The campaign, discovered by the DFIR Report in March 2026, has been codenamed BengalSEO. […]

Grindr to Pay £26 Million to Settle U.K. Claims Over HIV Status Data Sharing 2026-09-08 at 11:33 By Online dating app Grindr has opted to pay £26 million ($35.1 million) to settle a lawsuit in the U.K. over allegations that it shared users’ personal information, including their HIV status, with third-parties. Grindr, which is the […]

Apple’s first foldable iPhone is set to debut Wednesday — and all eyes are on new CEO John Ternus 2026-09-07 at 23:01 By Ariel Zilber Apple is expected to unveil its most radical iPhone redesign in years this Wednesday — giving new CEO John Ternus an early test of whether he can reignite innovation at […]

PEEP Turns Chrome and Edge Into Post-Compromise Backdoors for Host Command Execution 2026-09-07 at 21:12 By Cybersecurity researchers have disclosed details of a complex Chromium-based post-exploitation toolkit called PEEP that masquerades as a bookmarks extension for the web browser. “Requiring prior administrative or code execution access, its installer injects the extension directly into Chrome/Edge profiles, […]

Hunter Biden launches crypto meme coin making light of laptop scandal 2026-09-07 at 20:28 By Ariel Zilber Hunter Biden is turning his notorious laptop into a crypto play — launching a $LAPTOP meme coin that will hand out tokens to investors who lost money betting on President Trump’s rival digital currency. This article is an […]

OpenAI hires Chuck Schumer’s daughter as Big Tech cozies up to Democrats ahead of midterms: report 2026-09-07 at 19:27 By Ariel Zilber OpenAI has reportedly hired Senate Minority Leader Chuck Schumer’s daughter Jessica Schumer for a top policy job as Silicon Valley increasingly works to shore up ties with Democrats ahead of November’s midterm elections. […]

The Vendor You Can’t See Behind the Curtain 2026-09-07 at 19:00 By There is no universally correct ratio of vendor-to-in-house fraud detection, and anyone selling you one is selling you something. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Fake IT Calls Target Executives in Microsoft 365 Data Theft and Extortion Attacks 2026-09-07 at 18:51 By Threat hunters have disclosed details of a widespread data theft and extortion threat cluster that’s targeting Microsoft 365 and other software-as-a-service (SaaS) offerings through information technology (IT) help desk vishing, adversary-in-the-middle (AitM) token theft, and residential-proxy sign-ins. The […]

AI is unlocking a new ‘golden age’ in medicine, with personalized treatments to cure cancer and potential to save billions of lives 2026-09-07 at 18:41 By Michael Kaplan “It’s going to be incredible,” one doctor told The Post. This article is an excerpt from Latest Technology News | New York Post View Original Source

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More 2026-09-07 at 17:36 By Turning off email images should at least stop the pictures. This week, attackers had a workaround: a scannable QR code built out of text. It still appears, even with images blocked. A small detail, but an annoying one […]

Why you may pay more than someone else for the exact same thing — and it’s legal 2026-09-07 at 15:45 By Aurielle Weiss Your personal data is up for grabs, and it’s costing you. This article is an excerpt from Latest Technology News | New York Post View Original Source

Your Cloud Security Checklist Doesn’t Work the Way You Think It Does 2026-09-07 at 14:45 By If managing security across multiple cloud providers wasn’t hard enough, each one fails in a different way. For the 2026 Cloud Security Index, Intruder analyzed misconfiguration data from 3,000 organizations across AWS, Azure, and Google Cloud and found that […]

Rogue ScreenConnect Clients Spread Four-Stage VBScript Chain to Newly Connected Hosts 2026-09-07 at 14:36 By Cybersecurity researchers have disclosed details of worm-like activity that abuses ConnectWise ScreenConnect to distribute a malicious Visual Basic Script (VBScript) payload to newly connected systems. According to Huntress, three unrelated incidents have been found to use diverse initial access methods, […]

Telerik UI Padding-Oracle Bug Chained to Unauthenticated RCE — Public Exploit Released 2026-09-07 at 14:20 By A TantoSec proof-of-concept turns an AES-CBC “padding oracle” in Telerik UI for ASP.NET AJAX into unauthenticated remote code execution — but only against applications in a specific non-default configuration, and Progress patched the chain in July. There are no […]

Organizations Pledge Cooperation in Open Secure AI Alliance 2026-09-07 at 12:00 By A number of organizations announced the establishment of an open secure AI alliance. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

AI Tools Are Provided Full Enterprise Access 2026-09-07 at 12:00 By A recent report by Ospin analyzed enterprise production environments in 2026. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source