09 Nov, 2026

Cisco warns of denial of service flaw with PoC exploit code

Cisco has released security updates to patch a ClamAV denial-of-service (DoS) vulnerability, which has proof-of-concept (PoC) exploit code. Tracked as CVE-2025-20128, the vulnerability is caused by a heap-based buffer overflow weakness in the Object Linking and Embedding 2 (OLE2) decryption routine, allowing unauthenticated, remote attackers to trigger a DoS condition on vulnerable devices. If this vulnerability is […]

2 mins read

PowerSchool hacker claims they stole data of 62 million students

The hacker who breached education tech giant PowerSchool claimed in an extortion demand that they stole the personal data of 62.4 million students and 9.5 million teachers. PowerSchool is a cloud-based software solutions provider for K-12 schools and districts that provides tools for enrollment, communication, attendance, staff management, learning systems, analytics, and finance. On January […]

5 mins read

Conduent confirms cybersecurity incident behind recent outage

American business services giant and government contractor Conduent confirmed today that a recent outage resulted from what it described as a “cyber security incident.” Conduent has over 31,000 employees and provides services to half of Fortune 100 companies and over 600 government and transportation agencies. These include nine top U.S. health plans, four of five […]

2 mins read

Windows 11 24H2 now also offered to all eligible Windows 10 PCs

Microsoft says Windows 11 24H2 has entered the broad deployment phase and is now available to all seekers via Windows Update. The latest Windows version (known as the Windows 11 2024 Update) has also begun rolling out to all eligible PCs running Windows 10 22H2 this Tuesday. “Starting this week, we are expanding this latest Windows version’s phased rollout. […]

2 mins read

IPany VPN breached in supply-chain attack to push custom malware

South Korean VPN provider IPany was breached in a supply chain attack by the “PlushDaemon” China-aligned hacking group, who compromised the company’s VPN installer to deploy the custom ‘SlowStepper’ malware. The hackers managed to infiltrate IPany’s development platform and insert its custom ‘SlowStepper’ backdoor on its installer (‘IPanyVPNsetup.exe’), which infected customer systems when the VPN was […]

3 mins read

Hackers exploit 16 zero-days on first day of Pwn2Own Automotive 2025

On the first day of Pwn2Own Automotive 2025, security researchers exploited 16 unique zero-days and collected $382,750 in cash awards. Fuzzware.io is leading the competition after hacking the Autel MaxiCharger and Phoenix Contact CHARX SEC-3150 electric vehicle chargers using a stack-based buffer overflow and an origin validation error bug. This earned them $50,000 and 10 Master […]

2 mins read

Cloudflare mitigated a record-breaking 5.6 Tbps DDoS attack

The largest distributed denial-of-service (DDoS) attack to date peaked at 5.6 terabits per second and came from a Mirai-based botnet with 13,000 compromised devices. The UDP-based attack occurred last year on October 29 and targeted an internet service provider (ISP) in Eastern Asia in an attempt to bring its services offline. Security and connectivity services provider […]

2 mins read

Bitbucket services “hard down” due to major worldwide outage

Bitbucket is investigating a massive outage affecting Atlassian Bitbucket Cloud customers worldwide, with the company saying its cloud services are “hard down.” This web-based version control repository hosting service, owned by Atlassian, helps developers and teams collaborate on software projects by managing code, tracking changes, and integrating with other tools for development workflows. Bitbucket is popular among small teams and large […]

1 min read

Fake Homebrew Google ads target Mac users with malware

Hackers are once again abusing Google ads to spread malware, using a fake Homebrew website to infect Macs and Linux devices with an infostealer that steals credentials, browser data, and cryptocurrency wallets. The malicious Google ads campaign was spotted by Ryan Chenkie, who warned on X about the risk of malware infection. The malware used in […]

3 mins read

Microsoft previews Game Assist in-game browser in Edge Stable

Microsoft has announced that Game Assist, its recently unveiled in-game browser, is now also available in preview for Microsoft Edge Stable users. Game Assist is a special version of Edge optimized for PC gaming that will appear on top of your game in Game Bar as a “game-aware” overlay when hitting the Win+G keyboard shortcut. […]

2 mins read