Blog

CenterPoint Energy says a breach exposed sensitive data tied to 1.06 million Texans, while the utility investigates and prepares customer notifications.

Hirudo Android malware replaces Indonesian banking apps with patched copies, steals credentials and enables remote access, screen viewing and SMS theft.

Citizen Lab links Discover-Tech ads to zero-click Candiru spyware attacks, exposing Al Jazeera devices and systemic risks across global ad networks.

Microsoft and Health-ISAC seized domains tied to Chinese-language phishing services blamed for more than 1 billion messages targeting 75,000 organizations.

XBOW says AI agents helped build a Windows Chrome exploit chain in six days, earning Google’s first $250,000 full-chain bounty under its 2026 rules.

Ransomware victims report threats against employees and families, including doxxing, stalking and abduction claims that remain difficult to independently verify.

OpenAI fired engineer Abdulrahman Alfozan after a covert recorder was found in an executive conference room; the FBI arrested him on Oct. 9.

DOJ charged 14 people and seized 187 devices in a North Korean remote IT worker scheme spanning 70 U.S. companies and laptop farms.

XWorm’s latest plugins let attackers track location, stream microphone audio and control authenticated browser sessions without stealing credentials.

A public PoC chains three LG webOS flaws to gain root access on local networks, affecting tested TVs running webOS 7.5.7-25 and firmware 04.54.40.