Latest

A desk setup featuring a planner, pens, and a smartphone displaying app icons, ideal for productivity.

MacSync malware hides commands in public iCloud calendars

MacSync, a Swift‑based macOS malware, now uses public iCloud calendar events to fetch payloads, adding a stealthy delivery channel to its existing ClickFix‑style lures.

A programmer in a modern office working on computer code, showcasing a focused work environment.

GitLab private email addresses exposed, risk of unauthorised merge requests

Publicly posted GitLab private email addresses contain long‑lived tokens that let anyone open merge requests as the token owner, bypassing IP restrictions. Learn how to find, remove and reset these addresses.

Close-up of server racks in a data center highlighting modern technology infrastructure.

Agentic security is the billion‑dollar challenge for clever startups

Businesses are deploying AI agents faster than they can secure them, creating a billion‑dollar gap that investors see as a prime opportunity for startups offering identity, governance and endpoint protection for autonomous software.

Laptop displaying a security lock icon on a table with a potted plant and clock.

Microsoft September 2026 Windows Update Breaks Always On VPN Connections

The September 2026 Windows 11 update can stall Always On VPN connections when automatic protocol selection is enabled. A temporary fix forces the profile to use a single protocol while Microsoft works on a permanent solution.

Miniature caution cone on a computer keyboard symbolizing data security and control.

Magento StyleSmuggler zero‑day exploit is actively backdooring online stores

A zero‑day called StyleSmuggler lets attackers install a persistent backdoor on any Magento store without logging in. All versions up to 2.4.9 are vulnerable, Adobe has not yet issued a patch, and Disrex has confirmed live exploitation. Immediate mitigations include disabling GraphQL, rotating crede

Bearded man with eyeglasses working on a laptop in a minimalist office setting.

Fake LastPass Authenticator Installer Hijacks Windows Drivers to Disable Security Tools and Steal Credentials

A phishing campaign is using a counterfeit LastPass Authenticator installer to drop a signed kernel driver that disables security tools and steals credentials from browsers, wallets and messaging apps.

Close-up view of modern rack-mounted server units in a data center.

True Cost of Ransomware Attacks: Beyond the Ransom Payment

Ransomware’s headline‑grabbing ransom is only a fraction of the total bill, downtime, recovery and regulatory costs push the average incident cost to $5.08 million. A mature BCDR strategy can cut that dramatically.