BleepingComputer (1 hour ago)
Cryptocurrency hardware wallet maker Trezor has confirmed that three Safe 5 devices sold by Southeast Asian reseller CryptoBilis contained malicious hardware implants designed to steal wallet recovery phrases and send them to attackers over cellular networks.
Read the full story on BleepingComputer.
German defense technology company Quantum Systems confirmed that it detected an incident in late October that was part of an active cyberattack by “hostile actors.”
Russia has deployed an AI-powered traffic filter worth 2.27 billion rubles to detect and choke VPN connections across the country. Here’s all we know.
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other security flaws. Full protection from this flaw also requires rebuilding any C-language extensions installed on the server.
“SignDrop” exploit lets local users gain all-powerful System rights.
The US Department of Justice said it obtained a court order to freeze $1.2 billion stolen from Binance.
Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts.
An AI agent built to automate invoice processing could be manipulated into changing vendor bank details through a malicious email, without triggering traditional security alerts.
Microsoft warned customers earlier this week that the November 2026 security updates may break printing for documents with complex formatting.
Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October.
Microsoft has confirmed that this month’s Patch Tuesday security updates are causing Windows activation and licensing failures with 0x80041008 error codes.
The Guardian Technology
65 active sources
20 Turkish · 45 English
All sources
