Tor Exit Relays Hijacked to Steal SSH Passwords
Over 300 Tor exit relays were hijacked in early October to intercept SSH logins and steal passwords, prompting the Tor Project to flag them within days.
Security & Privacy
Breaches, offensive and defensive AI, and surveillance.
Context Bombs Deflect AI Agent Attacks With Decoy Prompts
A new defense technique lures attacking AI agents into fake targets and dead ends, cutting success rates by up to 91% and making each successful breach far costlier.
Rapid7: High-Severity Flaws Exploited Within Days as Ransomware Leads Q3
Rapid7's third-quarter threat report finds ransomware remains dominant while high-severity vulnerabilities are weaponised in an average of three days, and AI figures in only a small share of incidents.
Survey: Executives' Digital Exposure Now Seen as Physical Risk
More than 80% of security and wealth professionals say cyber and physical security can no longer be separated, a 360 Privacy survey shows.
Asymptote Labs Raises $5.5M Seed for AI Agent Runtime Security
The seed round, led by Tower Research Ventures, will fund commercialization of Asymptote Labs' Beacon runtime security platform for AI agents.
Decades-Old Windows 'finger' Utility Helps ClickFix Attack Deliver Lumma
Attackers combine a legacy Windows network command and a CAPTCHA trick to deploy the Lumma stealer.
Memory Bugs Dominate Chrome's 353 New Security Fixes
A large Chrome update patches 353 vulnerabilities, with memory corruption and use-after-free issues accounting for most of them.
Bronze Sandcastle Uses Sandboxie Sideloading to Target Asia, Africa
A newly documented China-aligned cluster has been abusing Sandboxie's DLL loading to implant backdoors in Asian and African organizations since mid-2025.
Generative AI Blunts Behavioral Email Detection, Proofpoint Finds
Attackers can now craft fluent, personalized phishing messages that strip away the clumsy-language clues filters once relied on.
Shrink-Wrapped Crypto Wallet Hid Spyware, Podcast Finds
A hardware crypto wallet arrived with surveillance code inside, underscoring supply-chain risks for devices users trust to protect their keys.
Onamae Desktop Cloud breach hits up to 26,739 servers
Hackers compromised Onamae Desktop Cloud's infrastructure and installed malware on tens of thousands of customer servers.
Lazarus Group Uses Post-Quantum Crypto for Malware Delivery
North Korea's Lazarus hackers are protecting malware payloads with post-quantum cryptography, a notable evolution in their attack chain.
Marvell, Microsoft, Oracle Push for Standardized Data Center HSM
The three firms are collaborating on a standardized hardware security module design aimed at meeting NIST FIPS 140-3 Level 3 for cloud infrastructure.
Survey: DLP Often Detects Data Loss Too Late to Stop It
A Cloud Security Alliance survey finds data loss prevention tools frequently identify breaches only after data has already left the organization.
GitLab Patches Maximum-Severity RCE Flaw Spanning 12 Years of Releases
A CVSS 10.0 flaw in GitLab's own regex engine can give unauthenticated attackers code execution on self-managed servers running any version since 7.0.
Lawmakers Warn Russia Is Targeting Democrats Ahead of Midterms
A new U.S. intelligence assessment shows foreign influence operations continue, though there is no evidence of direct election infrastructure hacking.
Windows Server 2025 Gets Quick Machine Recovery via October Update
The October 2026 security update enables quick machine recovery on Windows Server 2025, giving administrators a faster way to restore failed systems.
How Security Teams Can Tame Unsanctioned AI Workflows
A routine sales automation built without security oversight shows why 'wild code' is a growing risk.