SecurityNewLXD, MicroCloud flaw lets clients be impersonated
Canonical patched a maximum-severity LXD and MicroCloud bug that let attackers assume a trusted client's identity without its private key.
> Search
30 results for “ma”
SecurityNew
Cyber CrimeNewPolymarket breach exposes supply-chain risk
A hijacked third-party script let attackers drain 726 Polymarket wallets, prompting about $3.9 million in refunds and a review of script trust.
Tech NewsNewEU repair rules: easier fixes, higher costs
A year after the EU's smartphone Ecodesign rules took effect, repair access has improved, but high parts prices and glued-down designs still deter consumers.
Cyber CrimeSyrian Hacker Sentenced After 12 Years
Ahmad Umar Agha, tied to the Syrian Electronic Army, was sentenced to 42 months in the US more than 12 years after he was first charged.
SecurityA hands-on way to gauge AI ransomware risk
OWASP volunteers released RAID-AI, a free manual self-assessment that maps AI controls to NIST and CISA frameworks.
Cyber CrimeChina-Linked Chain Roots 25 PAN Firewalls
A suspected Chinese state actor chained PHP2Shell with a Linux kernel flaw to gain root on 25 Palo Alto servers, including a US government domain.
Cyber CrimeGhostAction Returns, Hits 340+ Maintainer Repos
A credential-theft campaign has compromised two open-source maintainer accounts to push malicious GitHub Actions workflows into more than 340 repositories.
Cyber CrimeDarkSword Kit Grows a Wallet-Stealing Arm
A new P7 DarkSword variant trims its on-device footprint while adding keychain theft, crypto-wallet extraction, and two-way command control.
SecurityWhy Your Coffee Maker Wants Your Contacts
A viral Keurig data spike and a Lavazza permission request expose how connected appliances collect far more than they need.
SecurityAI Speed, Human-Speed Guardrails
A SailPoint report finds most organizations still run identity security at human speed even as they deploy AI agents that operate far faster.
Cyber CrimeFBI Seizes Domains Tied to Chinese Hacking Tools
The FBI has seized seven domains linked to Chinese state-sponsored hackers, disrupting two key platforms used in attacks on critical infrastructure.
Cyber CrimeRansomware Hits Japanese Cloud Serving 495 Orgs
IDC Frontier says a ransomware attack on its IDCF Cloud disrupted East Japan Region 1 and locked 495 companies and local governments out of management consoles.
Cyber CrimeFBI Ties Chinese Firm to Email Theft Portal
A joint advisory says hackers linked to Integrity Technology Group stole email and ran a web app giving third parties access to it.
SecurityLet's Encrypt to shorten cert lifetimes in 2027
Let's Encrypt will cut certificate lifetimes from 90 to 64 days starting February 10, 2027, pushing administrators toward automated renewal.
Cyber CrimeRansomware Crews Face Betrayal From Within
A Gentlemen affiliate pocketed extortion profits on a private leak site, as a week of supply chain and phishing threats piled up.
Cyber CrimeAI Agent SDK Hit by Worm's Latest Strike
Shai-Hulud worm compromised Tensorlake's npm SDK version 0.5.144, stolen credentials and cloud keys at risk for developers.
SecurityEdge PQC Progress Masks Deeper Gaps
Post-quantum key exchange is spreading across top websites, but experts warn edge adoption does not equal enterprise readiness.
Tech NewsAmazon's new tablets drop Fire OS
Amazon's Alexa Tablet line replaces Fire OS with Android and Google Play Store access, starting at $229.99.
Cyber CrimeFake Firefox Wallets Target Recovery Phrases
Sixteen malicious Firefox extensions cloned Rabby and OKX wallet interfaces to intercept recovery phrases and private keys, researchers say.
Cyber CrimeEmpire Market Founder Gets 40 Years
Raheim Hamilton, co-creator of the dark web's Empire Market, is sentenced to 40 years for facilitating $430 million in illegal transactions.
Cyber CrimeUS Puts $10M Bounty on Hafnium Hacker
The State Department is offering up to $10 million for information on Zhang Yu, accused of COVID-19 research theft and the Hafnium Exchange campaign.
Cyber CrimeUAC-0099 Turns MATCHBOIL Into Long-Term Tool
ESET tracked MATCHBOIL versions from April 2024 to April 2026, linking the downloader to Russia-aligned UAC-0099 operating in Ukraine.
RoboticsMecka AI raises $60M for robot motion data
Mecka AI, a startup collecting human motion data to train robots, announced a $60 million Series B led by Sequoia, with Nvidia and Microsoft's M12 participating.
Cyber CrimeMALFEX npm Campaign Hidden in Eight Packages
CloudSEK and Checkmarx say a lone actor shipped 12 npm packages since 2023, eight flagged malicious and downloaded 40,767 times.
SecurityFake Certs Minted via Hijacked TLDs
Attackers reportedly seized control of top-level domains to issue valid-looking TLS certificates for Google and other organizations.
AI & MLAWS sandbox aims to tame rogue AI agents
Amazon's new open-source Strands Box uses OS-level isolation and policy rules to stop autonomous agents from going rogue.
SecurityCISO Data: Cyber Risk Moves Into Workflow
Five years of Voice of the CISO research show risk shifting from the perimeter to the flow of daily work, with AI governance and human risk at the center.
Tech NewsSpotify takes audiobooks to 180 markets
Spotify is rolling out audiobook access to more than 180 markets, with over 350,000 titles and a Premium allowance of 12 hours.
SecurityNew SonicWall Flaw Hits VPN Gateways
SonicWall issued hotfixes for a maximum-severity SSRF bug in SMA1000 appliances, urging customers to upgrade before attackers take note.
Cyber CrimeFortiBleed Credential Theft Still Active, FBI Says
The FBI and Secret Service say the FortiBleed campaign remains active, with 86,644 Fortinet device credentials amassed across 194 countries.