Fake Go DNS scanner spread malware through over 200 GitHub repos — ‘Operation Muck and Load’ has published 700 malicious modules since January
 Fake Go DNS scanner spread malware through over 200 GitHub repos — ‘Operation Muck and Load’ has published 700 malicious modules since January

The module published its first version on January 24 this year and has since accumulated more than 1,200 versions.

,
US cyber agency CISA had to build its incident playbook during the incident, agency reveals

CISA said it “missed” an opportunity to get ahead of the security incident by not creating a response plan ahead of time.

, , ,
Florida ransomware negotiator convicted for helping ransomware gang extort US companies

A third ransomware negotiator has been jailed for helping a notorious ransomware group to extort American victim companies into paying the hackers.

, , ,
Google Confirms New And Critical Chrome ‘Use-After-Free’ Memory Update

As Google releases yet another Chrome security update, here’s what you need to know about use-after-free flaws.

, , ,
Chat Control 1.0 sneaks through the EU Parliament, letting companies scan user data without warrants — legal tactic used to force a majority-required re-vote on eve of Parliament break
 Chat Control 1.0 sneaks through the EU Parliament, letting companies scan user data without warrants — legal tactic used to force a majority-required re-vote on eve of Parliament break

Chat Control 1.0 sneaks through the EU Parliament, letting companies scan user data without warrants — legal skullduggery used to force a majority-required re-vote on eve of Parliament break

,
Meta’s Muse Image AI Tool—Here’s How To Opt Out

Meta has released Muse Image, an AI tool that uses your Instagram profile pictures to generate images — unless you opt out. Here’s how.

, , ,
New hack exploits AI hallucinations to trick agents into running malicious code — ‘HalluSquatting’ attack exploits a fundamental weakness in every available model

Attackers can exploit how AI bots hallucinate software URLs to create massive botnets. The vulnerability is endemic to every model.

,
Another massive data breach exposed millions of driver’s license numbers

The cyberattack targeting a U.S. insurance giant is the largest known breach of driver’s license numbers so far in 2026.

, , , , ,
Hidden backdoor in Tenda routers goes unpatched as company ignores warnings from cybersecurity researchers — Chinese company’s firmware allows admin access without a password

CERT/CC has disclosed a critical authentication backdoor affecting multiple Tenda router firmware versions. Tracked as CVE-2026-11405, the flaw grants full administrator access without valid credentials, and no vendor patch is currently available after CERT failed to reach Tenda.

,
Arrest and extradition of Scattered Spider hacker shines light on how Windows telemetry GDIDs can identify and track users — Microsoft device identifier is just one digital fingerprint in a software world rife with them

While the use of Windows’ GDID to catch Scattered Spider hacking group member Peter Stokes is unusual, that device identifier is only one bit of telemetry that can be used to fingerprint a user across the wider Internet these days.

,