BleepingComputer (1 day ago)
A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a malicious driver designed to interfere with security solutions from Kaspersky and Avast.
Read the full story on BleepingComputer.
Researchers found a malicious AGENTS markdown instruction file in a customer’s Downloads folder that tricked an AI coding agent into installing a rogue npm package.
Ray-Ban Meta smart glasses have rightly been criticized for the many ways they can violate people’s privacy.
Your Mac comes with a fairly robust suite of built-in privacy tools.
Our ‘7 Days’ weekly tech roundup brings the juiciest announcements. Read about AV2 video support, unexpected Linux goofup, and iPod easter egg.
‘Session cookies’ are a primary target for hackers letting them hijack and use your accounts You’ve had a busy morning of life admin, logging into various accounts to check balances and make payments. At the end of a productive few hours you close your laptop and move on to your next job.
PingCAP recently confirmed unauthorized access to its internal systems and the theft of source code and customer-related data.
Researchers remotely disabled a vulnerable updater in the abandoned Time4Popcorn app, a fork of the Popcorn Time BitTorrent client, closing a security flaw that could have allowed attackers to execute malicious code with elevated privileges on millions of computers.
Microsoft has announced plans to add AI-powered phishing detection to Teams messages starting in early November 2026.
Microsoft says Windows Server 2016 will stop receiving security updates after it reaches the end of support in January 2027.
American clinical laboratory company Quest Diagnostics disclosed that patient records have been exposed after a threat actor gained unauthorized access to its Quanum LSM system.
72 active sources
27 Turkish · 45 English
All sources
