The Hacker News (3 hours ago)
Cybersecurity researchers are calling attention to what they say is a “recurring social engineering pattern” across hundreds of cases in which threat actors use Microsoft Teams’ external chat creation feature to conduct impersonation scams or to deliver malware.
Read the full story on The Hacker News.
Proton’s Black Friday deals give you a chance to save on its VPN or alternatively, on its entire suite of privacy-first tools.
Surfshark data shows blocks of one fake TikTok Shop domain rose 638% between May and September, as phishing exposure climbs across Europe and the US ahead of Black Friday.
A malicious update could infect millions of devices without users ever knowing.
A critical flaw dubbed ‘HTTP2Shell’ in Brotli, the C decoder library built into Node.js, could allow attackers to corrupt memory and access sensitive data.
Samsung TVs are being accused of sinister snooping online, but it looks like the discussion is based on some false assumptions about features Samsung has actively marketed to everyone
Microsoft released emergency .NET security updates to patch a critical vulnerability known as Broccoli2Shell, also tracked as Node2Shell and HTTP2Shell.
PHP has rebuilt its official Windows packages for PHP 8.2 through 8.5 to fix CVE-2026-111497, a flaw in the Brotli compression library that the packages include. The flaw can let an attacker corrupt memory and potentially run code.
This2Shell, That2Shell, Everything2Shell. That’s pretty much how the last week went. Critical bugs that let attackers run code remotely are showing up everywhere.
Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sandbox intended to contain it, the project’s maintainers say.
Every SOC struggles with a pile of alerts. Very few of those alerts explain how an attack started or how it progressed.
The Guardian Technology
71 active sources
26 Turkish · 45 English
All sources
