The Hacker News (1 hour ago)
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the server.
Read the full story on The Hacker News.
German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by “hostile actors.”
Russia has deployed an AI-powered traffic filter worth 2.27 billion rubles to detect and choke VPN connections across the country. Here’s all we know.
“SignDrop” exploit lets local users gain all-powerful System rights.
The US Department of Justice said it obtained a court order to freeze $1.2 billion stolen from Binance.
Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts.
The Register reports that Context tracked a 35% increase in distributor sales of cybersecurity products from EU-headquartered vendors between Q3 2024 and Q3 2026. Overall sales grew 10%, while American suppliers managed 8%.
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server’s operator out. One of them, Mior, can also modify a VM’s memory and fake the signed report confirming which software it runs.
The U.S. Federal Bureau of Investigation (FBI) has established that threat actors tied to the Democratic People’s Republic of Korea (DPRK aka North Korea) have stolen more than $400 million worth of cryptocurrency as part of a social engineering scheme codenamed FaceStealer in the last 18 months.
Three Trezor Safe 5 wallets bought from the reseller CryptoBilis contain an implant, an extra circuit board that can copy their recovery phrases, hardware wallet maker Trezor said yesterday.
Suppose an AI agent is asked to sort support tickets and look up account details. A ticket contains instructions that lead the agent to export records to an unfamiliar destination. The agent can make the request because its identity has access to the records and its connected tools allow the action.
The Guardian Technology
65 active sources
20 Turkish · 45 English
All sources
