Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
BigDiskBuster: Researcher Naceri Claims Tool Blocks Windows Defender Updates
Researcher Abdelhamid Naceri says BigDiskBuster prevents Windows Defender from receiving platform and signature updates while running…
Cisco Talos Launches CAIRN: Hunting AI Malware Without Executing a Single Binary
Cisco Talos has released CAIRN, an open-source toolkit that tracks AI-integrated malware through cognitive artifacts in metadata. The…
Gyazo Breach: 23.62 Million Records Stolen via Upload Server Flaw
Attackers exploited a vulnerability in Gyazo's image upload server to exfiltrate 23.62 million user records and 490 million image meta…
BigCommerce Breach via Ribon App Exposes Merchant Store Customer Data
BigCommerce confirmed on September 17, 2026 that compromised credentials for the third-party Ribon app were used to inject malicious s…
Over 100 Fake AI Sites: A $249 Toolkit Lowers the Barrier for Subscription Fraud
Malwarebytes identified more than 100 fake AI subscription sites built with a commercial $249 toolkit. The sites impersonate real bran…
CrowdSec: Source Code Stolen from 170 Private Repos — Offboarding Wasn't Enough
On September 16, 2026, source code from roughly 170 private CrowdSec repositories appeared on a criminal forum. The exfiltration occur…
Mirai Expands From IoT Devices to Servers: Active Exploitation of cPanel Auth Bypass CVE-2026-41940
Threat actors are exploiting the CVE-2026-41940 authentication bypass in cPanel/WHM to compromise hosting servers and deploy Mirai mal…
Jade Sleet Breaks Out of Crypto Tunnel: macOS Backdoors Found in Indian IT Provider
SentinelOne reveals North Korean threat actor Jade Sleet compromised an Indian IT services provider using the FLATROOF and ROOFDECK ma…
How Intent Injection Threatens 6G AI-Native Network Automation
A paper from the University of Ottawa and Nokia Bell Labs exposes adversarial intent injection in 6G AI-native networks: malicious JSO…
Infected PHP Themes on Streaming Sites: The iOS Chain That Empties Crypto Wallets
Thirteen compromised Packagist packages turn Vietnamese streaming sites into vectors for a WebKit-to-kernel exploit chain on iPhone, s…
npm Package indexed-btree Evades Install-Time Defenses With Runtime Payload
The npm package indexed-btree, masquerading as the legitimate sorted-btree library and pulling nearly 2 million weekly downloads, hide…
Plugin4Shell: First Supply-Chain Vulnerability in AI Agent Plugin Ecosystem
The Plugin4Shell vulnerability bypasses SHA pinning in plugins for four AI agents. Two vendors have patched; Microsoft and Google have…