Collaborate Disseminate
Microsoft’s July 2026 Patch Tuesday fixes 622 CVEs, including exploited AD FS and SharePoint flaws, plus the disclosed BitLocker bypass requiring urgent action. Continue reading Microsoft’s July 2026 Patch Tuesday fixes 622 flaws and 2 exploited zero-days
Telegram’s t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown. Continue reading Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold
Telegram’s t.me links stopped resolving after the .ME registry applied serverHold. The app still works, while the reason for the domain action remains unknown. Continue reading Telegram’s t.me Links Go Offline After Registry Places Domain on serverHold
Proofpoint details how attackers spoof OAuth client IDs to probe Microsoft Entra accounts, test credentials and bypass common sign-in detections at cloud scale. Continue reading Millions of Microsoft Entra Accounts Targeted in OAuth Client ID Spoofing Campaigns
Dr.Web details Siggen Windows backdoor that uses Steam for C2, steals credentials and crypto data and infects Visual Studio projects to spread among developers. Continue reading Siggen Backdoor Hits Windows Developers Via Infected Visual Studio Projects
Former ransomware negotiator Angelo Martino gets 70 months in prison for helping BlackCat extort US victims and misuse confidential client data in cyberattacks. Continue reading Cybersecurity Negotiator Gets 70 Months for Helping BlackCat Extort Victims
Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally. Continue reading Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs
Darktrace says a LiteLLM AI gateway linked to Amazon Bedrock was compromised for cryptomining after signs of exposed SSH activity. Continue reading AI Gateway Connected to Amazon Bedrock Hijacked for Cryptomining
Wiz found GhostApproval symlink flaws in major AI coding assistants that could hide sensitive file targets, bypass approval checks and enable system access too. Continue reading GhostApproval Flaws Let Top AI Coding Tools Write Outside Workspaces
DuckDuckGo’s browser now blocks most YouTube ads by default on supported devices. Here’s how it works, which platforms support it, and its limits. Continue reading DuckDuckGo Now Blocks Most YouTube Ads Right Inside Its Browser