Citizen Lab has shown that a targeted ad was enough to infect Al Jazeera devices with Candiru spyware, no click needed. Here is how it worked and what UK organisations …
-
-
Your IT provider holds the keys to your network. Here is what to ask your MSP, and how to check it has been tested the way an attacker would test …
-
Attackers briefly swapped files on AOMEI’s update servers so that Backupper installs downloaded a backdoor. Here is what Google and ManageEngine found.
-
Cross-site scripting lets attackers run their own code in your users’ browsers. Here is how XSS works, the three main types, and the layered defences that stop it.
-
An attacker used a credential for ConnectWise’s Cloud Backup app to sign in to Microsoft 365 tenants one by one. Here is what happened and the checks to run this …
-
A plain-English guide to how interception attacks work, the main types from ARP spoofing to evil twin Wi-Fi, and the controls that stop them.
-
A Linux kernel networking flaw, CVE-2026-99999, lets code in a guest VM leak host memory. Here is how it works and what to patch.
-
Session hijacking lets an attacker take over a logged-in account without a password or MFA code. Here is how it works, the main types, and the fixes that matter.
-
Ledger confirmed a hardware implant in a wallet sold by a Southeast Asian reseller. Here is what is known, what is not, and what businesses should check about the devices …
-
Privilege escalation turns a small foothold into full control. Learn the types, how attackers do it, and the controls that limit the damage.