Collaborate Disseminate
Cybersecurity researchers have flagged a new Android malware called RatHat that’s assessed to be operated by China-based threat actors and features an artificial intelligence (AI)-powered system to navigate and control compromised devices.
“Distribut… Continue reading RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall
In June 2026 the IETF published RFC 10008[1], defining a new HTTP method: “QUERY”. The HTTP protocol faced already by changes (HTTP/2, HTTP/2) but it’s the first new standard HTTP verb since “PATCH” in 2010!
Continue reading HTTP QUERY Method: The Grey Zone Between GET And POST., (Fri, Sep 18th)
Millions of people still run smart home and IoT companion apps, the apps used to control devices like smart plugs, cameras, and thermostats, that stopped receiving updates years ago. Researchers at the University of Massachusetts Amherst analyzed 61,50… Continue reading Abandoned IoT apps keep sending sensitive data to broken servers
Tuesday U.S. Space Force chief Douglas Schiess said his branch of the U.S. military operates “on-orbit weapons,” reports Reuters, to defend “against space-enabled attacks.” He promised “disciplined and responsible choices” when scaling America’s orbita… Continue reading America Acknowledges for the First Time: It Has Deployed Weapons In Space
Hardcoded API keys, access tokens and other credentials used by AI coding tools have been found in publicly accessible MCP configuration files on GitHub, according to research from Hush Security’s The State of MCP Configuration: The Identity Security G… Continue reading Hardcoded MCP credentials found in public GitHub files
A 90-day period between hiring and onboarding is creating a blind spot in enterprise identity security, according to HYPR’s State of HR Identity Fraud Detection report. “Adversaries no longer need to breach a network when they can pass a remote intervi… Continue reading 98% of fraudulent hires have company credentials by the time they’re caught
If you want to do certain types of lab work with blood, you’ll need a centrifuge. It’s often possible to find serviceable units on the used market, but they may …read more Continue reading Building a DIY Centrifuge For Blood Processing
Melapress, a maker of WordPress security plugins, surveyed 319 WordPress professionals and found that most had dealt with at least one known security incident. The respondents build and run WordPress sites for a living: agency staff, developers, design… Continue reading Most WordPress pros still lack a breach recovery plan
Here’s a look at the most interesting products from the past week, featuring releases from Akuity, Bitsight, Cohesity, Dataminr, Nozomi Networks, and Tuskira. Dataminr uses agentic AI to predict and verify security threats Dataminr has announced Datami… Continue reading New infosec products of the week: September 18, 2026
Surveillance cameras from Flock Safety have become a controversial privacy battleground, as the communities in which they are installed wake up to their sinister potential, and stories roll in of …read more Continue reading Surveillance Camera Security? It’s Completely Flocked!