Cybersecurity researchers have discovered a malicious npm package that's part of a recently disclosed software supply chain attack campaign dubbed MALFEX. The package, named "imgdecode," was...
'Hold my beer, have fun getting into your offices'
Image: ChatGPT What’s new: A piece by our colleague Andy Proctor published by the UK’s National Preparedness Commission. His major thesis is summed up well in the first few paragraphs: “PNT is...
Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.
Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise...
ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants. [...]
Kraków, which received 8.7 million overnight tourists last year, had appealed for a change to the law.
Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system. [...]
U.S. President Donald Trump issued a broad waiver of sanctions under the Lindsey O. Graham Sanctioning Russia and Iran Act on Oct. 16.
Where heating is available, many cannot afford to adequately heat their homes. Only 32% of Ukrainians reported being able to do so during the last heating season, a figure that dropped to just 1%...
A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL...
ConnectWise (SkyKick) vendor credentials are being abused to access Microsoft 365 tenants. Disable the apps now and check your logs here.
Russia's Federal Air Transport Agency announced restrictions at three of Moscow's four major airports, while the Transportation Ministry said the region's aviation operations were under "special...
Attackers repeatedly changed the files that AOMEI Backupper fetches from the vendor's own update servers, in windows of five to ten minutes at a time between May and July 2026, so that any copy of...
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to...
New research shows that squid lived all around the globe even before the Cretaceous-Paleogene mass extinction event. As usual, you can also use this squid post to talk about the security stories...
Google security advisory (AV26-1060)
"This deal won't lower costs for the American people, who are already paying forTrump's failed war of choice in Iran. It will hand Putin millions of dollars to continue slaughtering Ukrainian...
OpenAI has disclosed seven new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior, including one case where its research model, after not having funds on an...
A court in Kharkiv has ordered that Russian citizen Leonid Ryzhikov be held in pretrial detention. He stands accused of killing six Ukrainians: five service…
About 35 people, including Russian citizens, have begun a hunger strike at the El Valle immigration detention facility in the U.S. state of Texas. The…
Image: Ft Jefferson, Dry Tortugas, FL credit KeyWestTravelGuide.com What’s new: An opinion piece about overall resilience and the “Fortress America” initiative. Why it’s important: National...
The Suez Canal Authority has introduced mandatory technical inspections and testing for ships that are 25 years old or older, according to a report by industry…
The balancing act of Bulgaria's Moscow-friendly leader stands on shaky ground.Since taking office in May, Bulgarian Prime Minister Rumen Radev has taken a harsh line on Ukraine while adopting...
BMC Helix security advisory (AV26-1059)
Key developments on Oct. 16:Drone attack sparks fire at industrial facility in Russia's Surgut district, governor saysPope Leo urges Putin to allow humanitarian aid, evacuations from...
Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.
Four sources familiar with the discussion said that Elon Musk approached U.S. President Donald Trump with the idea of slowing down Ukraine's Starlink service on the battlefield.
The pope called for a local ceasefire to allow humanitarian aid deliveries and the safe evacuation of civilians from the front-line city, where around 2,000 residents remain trapped amid severe...
Learn how SentinelOne's Static AI blocked APT29's CaptiveCrunch campaign on the endpoint, stopping local DNS poisoning and captive portal network lures.