Uncategorized

Microsoft Details Cookie-Controlled PHP Web Shells Persisting via Cron on Linux Servers 2026-04-03 at 20:58 By Threat actors are increasingly using HTTP cookies as a control channel for PHP-based web shells on Linux servers and to achieve remote code execution, according to findings from the Microsoft Defender Security Research Team. “Instead of exposing command execution through URL […]

Car site Edmunds tests a $25K Chinese hybrid SUV — and issues warning to US automakers: ‘Technology is terrific’ 2026-04-03 at 18:58 By Reuters While Chinese cars are effectively banned in the US, Edmunds wanted to test one because of growing US consumer interest in the affordable, feature-packed vehicles. This article is an excerpt from Latest Technology

SpaceX in talks with Saudi Arabia’s Public Investment Fund about potential $5B investment in IPO: report 2026-04-03 at 18:58 By Thomas Barrabi The additional investment would help prevent any dilution of the sovereign wealth fund’s stake in SpaceX when the company goes public, Reuters reported, citing sources familiar with the matter. This article is an

Google issues 2nd security warning in days over Chrome browser attacks 2026-04-03 at 18:05 By Ben Cost Google has issued a security alert to Chrome users after confirming that cybercriminals had exploited a vulnerable system, marking the second such advisory in days. This article is an excerpt from Latest Technology News | New York Post

Meta lays off hundreds as tech giant pushes forward with AI investment 2026-04-03 at 17:53 By Ariel Zilber The Facebook parent company will cut nearly 200 workers in the Bay Area, according to newly surfaced state filings. This article is an excerpt from Latest Technology News | New York Post View Original Source

Symantec CBX Through the Paparazzi Lens 2026-04-03 at 17:53 By Dan Mellinger A recap of all the media moments that surprised us—and everyone’s still talking about This article is an excerpt from SECURITY.COM View Original Source

AI Startup Mercor, Which Works With Open AI and Anthropic, Confirms Data Breach 2026-04-03 at 17:52 By Mercor has faced a breach of data.  This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

Why Third-Party Risk Is the Biggest Gap in Your Clients’ Security Posture 2026-04-03 at 17:52 By The next major breach hitting your clients probably won’t come from inside their walls. It’ll come through a vendor they trust, a SaaS tool their finance team signed up for, or a subcontractor nobody in IT knows about. That’s the new attack

UNC1069 Social Engineering of Axios Maintainer Led to npm Supply Chain Attack 2026-04-03 at 17:52 By The maintainer of the Axios npm package has confirmed that the supply chain compromise was the result of a highly-targeted social engineering campaign orchestrated by North Korean threat actors tracked as UNC1069. Maintainer Jason Saayman said the attackers tailored their social

It’s not just Florida and Texas that threaten NYC’s sputtering tax base — here’s the next big worry 2026-04-03 at 14:31 By Charles Gasparino Prospective investors in the city’s current and future debt note there will likely be less of a population to tax. This article is an excerpt from Latest Technology News | New

When a billboard survives the wind, but not the boot 2026-04-03 at 14:30 By Richard Speed This GRUB is not an advert for some tasty fried food Bork!Bork!Bork!  It’s one thing to bare your undercarriage in private. It’s a whole other thing to do so on the side of a road, risking the possibility that

Stakeholder Confidence in the Age of Digital Threats: PR as a Security Asset 2026-04-03 at 14:30 By Every cyber incident also creates a communication challenge that directly affects stakeholder confidence. This article is an excerpt from Subscribe to Security Magazine’s RSS Feed View Original Source

New SparkCat Variant in iOS, Android Apps Steals Crypto Wallet Recovery Phrase Images 2026-04-03 at 14:30 By Cybersecurity researchers have discovered a new version of the SparkCat malware on the Apple App Store and Google Play Store, more than a year after the trojan was discovered targeting both the mobile operating systems. The malware has been found to conceal itself within seemingly

Drift Loses $285 Million in Durable Nonce Social Engineering Attack Linked to DPRK 2026-04-03 at 12:15 By Solana-based decentralized exchange Drift has confirmed that attackers drained about $285 million from the platform during a security incident that took place on April 1, 2026. “Earlier today, a malicious actor gained unauthorized access to Drift Protocol through a

Outrage as Oracle makes thousands of foreign-worker requests amid layoff bloodbath 2026-04-03 at 05:53 By Marc Vartabedian As thousands of Oracle employees awoke on Tuesday to an email informing they were caught up in mass layoffs, they likely didn’t know the tech company had been busy trying to employ foreign workers.  This article is an

AI models will deceive you to save their own kind 2026-04-03 at 04:25 By Thomas Claburn Researchers find leading frontier models all exhibit peer preservation behavior Leading AI models will lie to preserve their own kind, according to researchers behind a study from the Berkeley Center for Responsible Decentralized Intelligence (RDI).… This article is an

ChatGPT owner OpenAI acquires technology talk show TBPN in surprise move 2026-04-03 at 00:53 By Reuters OpenAi had recently shelved its Sora video-generation tool as part of its efforts to focus on the lucrative market for AI coding tools. This article is an excerpt from Latest Technology News | New York Post View Original Source

Google battles Chinese open-weights models with Gemma 4 2026-04-03 at 00:53 By Tobias Mann Now with a more permissive license, multi-modality, and support for more than 140 languages Google on Thursday unleashed a wave of new open-weights Gemma models optimized for agentic AI and coding, under a more permissive Apache 2.0 license aimed at winning

Hackers Exploit CVE-2025-55182 to Breach 766 Next.js Hosts, Steal Credentials 2026-04-03 at 00:52 By A large-scale credential harvesting operation has been observed exploiting the React2Shell vulnerability as an initial infection vector to steal database credentials, SSH private keys, Amazon Web Services (AWS) secrets, shell command history, Stripe API keys, and GitHub tokens at scale. Cisco Talos has attributed the operation

Thousands of power strips sold on Amazon recalled due to ‘serious’ fire risk 2026-04-02 at 23:22 By Marissa Matozzo This “power” move could spark more than just your devices. This article is an excerpt from Latest Technology News | New York Post View Original Source