The Hacker News (1 hour ago)
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server’s operator out. One of them, Mior, can also modify a VM’s memory and fake the signed report confirming which software it runs.
Read the full story on The Hacker News.
“SignDrop” exploit lets local users gain all-powerful System rights.
The US Department of Justice said it obtained a court order to freeze $1.2 billion stolen from Binance.
Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts.
The Register reports that Context tracked a 35% increase in distributor sales of cybersecurity products from EU-headquartered vendors between Q3 2024 and Q3 2026. Overall sales grew 10%, while American suppliers managed 8%.
A spare ESP32 replaced my VPN.
Noteworthy stories that might have slipped under the radar: Siemens details security advisory policy, OpenAI Codex backdoor risk, Microsoft warns of model weight backdoors.
The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People’s Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months.
Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday.
Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its connected tools allow the action.
A newly identified spying group used hacked equipment inside Asian mobile operators to intercept the calls and texts of selected people, mostly in Taiwan.
The Guardian Technology
65 active sources
20 Turkish · 45 English
All sources
