vulnerability
Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
A Chinese APT has been exploiting a BeyondTrust vulnerability as a zero-day since August as part of its state-sponsored espionage operations. The…
F5, Juniper Networks Patch Critical Vulnerabilities
F5 and Juniper Networks have rolled out patches for dozens of vulnerabilities across their products, including critical-severity remote code execution (RCE) flaws.…
Microsoft Patches Two Dozen RCE Flaws in Office
Hot on the heels of its record Patch Tuesday rollout, Microsoft on Thursday announced patches for over 30 new vulnerabilities. Most of…
CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products
The US Cybersecurity and Infrastructure Security Agency (CISA) has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog: CVE-2026-0322, a…
$10 million bounty offered for Chinese Hafnium hacker accused of Microsoft Exchange Server mega-attack
The US State Department is offering up to US $10 million for information about the whereabouts of Zhang Yu, a 44-year-old Chinese…
Smashing Security podcast #486: Vibe-coded shops, and hackable Flock cameras
DAVE BITTNER I have to say, what this reminds me of is there was a glitch on Amazon for a while. I…
Smashing Security podcast #485: These researchers got drunk to hack an LG TV
RESEARCHER So we’re gonna have a private conversation about our next crypto scam, and it would really be unfortunate if anyone had…
Smashing Security podcast #483: This AI helps thieves steal your iPhone
JAMES BALL At what stage was this surprise? You know, we locked 15 murderers in a room. You’ll never believe what happened…