Posted inTechnology
Microsoft Warns Misconfigured Email Routing Can Enable Internal Domain Phishing
Jan 07, 2026Ravie LakshmananEmail Security / Financial Fraud Threat actors engaging in phishing attacks are exploiting routing scenarios…
Posted inEmerging Tech & Futurism
Founder of spyware maker pcTattletale pleads guilty to hacking and advertising surveillance software
The founder of a U.S.-based spyware company, whose surveillance products allowed customers to spy on the phones and…
Posted inTechnology
Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D-Link DSL Routers
Jan 07, 2026Ravie LakshmananNetwork Security / Vulnerability A newly discovered critical security flaw in legacy D-Link DSL gateway…
Posted inTechnology
Two Chrome Extensions Caught Stealing ChatGPT and DeepSeek Chats from 900,000 Users
Cybersecurity researchers have discovered two new malicious extensions on the Chrome Web Store that are designed to exfiltrate…
Posted inTechnology
Unpatched Firmware Flaw Exposes TOTOLINK EX200 to Full Remote Device Takeover
Jan 06, 2026Ravie LakshmananIoT Security / Vulnerability The CERT Coordination Center (CERT/CC) has disclosed details of an unpatched…
Posted inTechnology
Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on Servers
Jan 06, 2026Ravie LakshmananVulnerability / Web Security Users of the "@adonisjs/bodyparser" npm package are being advised to update…
Posted inTechnology
VS Code Forks Recommend Missing Extensions, Creating Supply Chain Risk in Open VSX
Jan 06, 2026Ravie LakshmananThreat Intelligence / Cloud Security Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code)…
Posted inTechnology
What is Identity Dark Matter?
Jan 06, 2026The Hacker NewsSaaS Security / Enterprise Security The Invisible Half of the Identity Universe Identity used…
Posted inTechnology
Fake Booking Emails Redirect Hotel Staff to Fake BSoD Pages Delivering DCRat
Jan 06, 2026Ravie LakshmananMalware / Endpoint SecuritySource: Securonix Cybersecurity researchers have disclosed details of a new campaign dubbed…
Posted inTechnology
New n8n Vulnerability (9.9 CVSS) Lets Authenticated Users Execute System Commands
Jan 06, 2026Ravie LakshmananVulnerability / DevOps A new critical security vulnerability has been disclosed in n8n, an open-source…