Posted inTechnology
Court Filing Reveals Windows Device ID Helped FBI Trace Alleged Scattered Spider Hacker
U.S. prosecutors linked an alleged Scattered Spider hacker to a break-in at a luxury jewelry retailer using a…
Posted inTechnology
What Changes When Your Software Supply Chain Includes AI Writing Your Code?
The Hacker NewsJul 07, 2026AI Security / Software Supply Chain Software supply chain security was hard enough. Then…
Posted inTechnology
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities
A suspected China-aligned threat activity cluster has been observed exploiting Roundcube webmail software belonging to physics and engineering…
Posted inTechnology
CERT/CC Warns of Hidden Admin Backdoor in Tenda Router Firmware
Ravie LakshmananJul 07, 2026 Several versions of firmware released by Chinese network device manufacturer Tenda have been found…
Posted inTechnology
BeyondTrust Patches Critical Auth Bypass Flaws in Remote Support and PRA
Ravie LakshmananJul 07, 2026Vulnerability / Enterprise Security BeyondTrust has released updates to address two critical security flaws affecting…
Posted inTechnology
Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously…
Posted inTechnology
16-Year-Old Linux KVM Flaw Lets Guest VMs Escape to Host on Intel and AMD x86 Systems
A use-after-free bug in Linux's KVM hypervisor can be triggered from a guest virtual machine to corrupt the…
Posted inTechnology
Threat Actors Probe Gitea Docker Flaw CVE-2026-20896 13 Days After Disclosure
Ravie LakshmananJul 06, 2026Vulnerability / DevOps Threat actors have been observed attempting to exploit a recently patched critical…
Posted inTechnology
Suspected China-Nexus Hackers Use Fake Indian Tax Filing Utility to Deploy DcRAT
A suspected China-nexus threat activity cluster has been observed targeting Indian taxpayers, tax professionals, and corporate finance teams…
Posted inTechnology
Proxy Botnets, Browser Ransomware, AI Agent Tricks, Fake PoC Malware and More
A streaming box should not need a threat model. Neither should a username field, a demo repo, a…