1+ day, 10+ hour ago   (410+ words) India's Ministry of Home Affairs has ordered GitHub to remove repositories hosting Jack Dorsey's decentralized messaging app Bitchat, arguing that the Bluetooth mesh platform could be used to evade internet shutdowns and lawful surveillance. The order, which was made public…...

1+ day, 12+ hour ago   (257+ words) Threat actors are compromising hotel and conference center Wi-Fi gateways to redirect travelers to fake Microsoft login pages and steal corporate accounts. The campaign has been active since at least June 2026 and appears to reuse techniques previously associated with the…...

1+ day, 16+ hour ago   (246+ words) The Tor Project has paused new feature development for Tor Browser 16 as developers work through more than 250 changes inherited from Firefox ESR 153 to ensure they do not weaken the browser's privacy and anonymity protections. The announcement accompanied the release of…...

1+ day, 16+ hour ago   (274+ words) Hackers believed to be Cl0p ransomware operatives are exploiting a critical flaw in PTC Windchill and FlexPLM to deploy web shells and steal sensitive enterprise data. While the threat actor has not been identified with absolute certainty, the observed tactics closely…...

2+ day, 8+ hour ago   (460+ words) Security researchers Talal Haj Bakry and Tommy Mysk have disclosed a macOS weakness that allows malware already running under a user's account to silently replace the executable of trusted applications downloaded from the web and relaunch them without triggering Gatekeeper…...

2+ day, 15+ hour ago   (178+ words) A newly identified Windows malware called Dolphin X combines information-stealing capabilities with remote access features while targeting credentials from more than 300 applications. The malware also includes an AI-powered profiler that automatically ranks infected users, helping attackers identify the most valuable…...

2+ day, 15+ hour ago   (243+ words) A popular Wansview indoor security camera was shipping in 2026 with a web server vulnerable to a flaw first disclosed more than two decades ago. The finding comes from firmware security company Finite State, whose researchers analyzed the Wansview WVC Q5, an…...

3+ day, 11+ hour ago   (464+ words) A chain of vulnerabilities in the Adobe Acrobat Chrome extension could have allowed attackers to steal content from a victim's WhatsApp Web session simply by luring them to a malicious website. Adobe fixed the flaws within days of the report…...

3+ day, 10+ hour ago   (292+ words) Apple has fixed a vulnerability in its iCloud+ Hide My Email service that could expose users' real email addresses. The fix comes over a year after a security researcher privately reported the issue and only weeks after 404 Media publicly disclosed…...

4+ day, 12+ hour ago   (447+ words) A new study shows that the Argon2id password hashing algorithm dramatically increases the cost of offline password cracking by neutralizing much of the advantage offered by modern GPUs. The study by Specops researcher David Ketler examines how Argon2id performs against modern password-cracking…...