PinTheft: Another Linux Privilege Escalation, Another Working Exploit, This Time Targeting Arch

PinTheft is a Linux LPE flaw in the RDS subsystem with public exploit code. Arch Linux users face the highest risk and should patch immediately. The wave of Linux... Read more »

Mac Users Face New Malware Threat Spoofing Apple, Google, and Microsoft

A new SHub Reaper macOS infostealer spoofs prompts from Apple, Google, and Microsoft to steal passwords, crypto data, and business files from Macs. The post Mac Users Face New... Read more »

Microsoft Launches New Surface AI PCs for Business Buyers

Microsoft launched new Surface for Business PCs with Intel Core Ultra Series 3 chips, AI features, 5G options, and enterprise security tools. The post Microsoft Launches New Surface AI... Read more »

CISA Contractor Exposed Sensitive Credentials in Public GitHub Repository

CISA is investigating after a contractor’s public GitHub repository exposed AWS GovCloud credentials, internal files, and passwords. The post CISA Contractor Exposed Sensitive Credentials in Public GitHub Repository appeared... Read more »

Microsoft issues YellowKey mitigation, no patch yet

Microsoft acknowledged the YellowKey BitLocker bypass flaw and released mitigations, urging admins to disable autofstx.exe and enable TPM+PIN. A week after Chaotic Eclipse publicly dropped the YellowKey vulnerability, Microsoft... Read more »

Spanish police ‘systematically’ hid cryptophone intercepts from courts, claims ex chief

Former Spanish police chief, on trial for drug trafficking, claims that UK and Columbian police assisted in creating fictitious intelligence reports to hide use of intercept from encrypted phone... Read more »

Carding site B1ack’s Stash dumps 4.6 Million stolen cards for free 

Carding forum B1ack’s Stash claims to have released millions of stolen CVV2 payment card records for free after suspending sellers. B1ack’s Stash, one of the most active stolen card... Read more »

Bulgaria fires up Google Cloud for national cyber security

The Bulgarian national systems integrator, BIS, has deployed Google Cloud’s Cybershield government security service as part of a national federated SOC deployment. Read more »

Cisco Catalyst SD-WAN Controller Auth Bypass Actively Exploited to Gain Admin Access

Cisco has released updates to address a maximum-severity authentication bypass flaw in Catalyst SD-WAN Controller that it said has been exploited in limited attacks. The vulnerability, tracked as CVE-2026-20182,... Read more »

What did we learn at Google Cloud Next 2026?

AI agents are moving fast and telecoms organisations are still working out how to run them safely. At Google Cloud Next in April, the conversation continued to move beyond... Read more »
Subscribe to our Newsletter