Tag: security
Sweden tells citizens to be ruder to phone scammers as criminals take advantage of good manners
Swedish celebrities are fronting a campaign to be rude to phone scammers The majority of Swedish phone scam victims are over 60 Swedish police state that fraudsters collect around 5.7 billion SEK a year, over £431 million Swedish celebrities have been hired to help the national government promote the use…
Read More
Apple patches CoreGraphics zero-day used in ‘extremely sophisticated’ targeted attacks on iOS devices
Apple patches high-severity CoreGraphics zero-day reportedly exploited against specific targeted individuals The vulnerability enables arbitrary code execution through maliciously crafted files on affected Apple devices Apple urged users to install the latest security updates, particularly high-value targets facing sophisticated attacks Apple has released a fix for a zero-day vulnerability it…
Read More
ShinyHunters hackers are going after Oracle systems once again – here’s what we know
ShinyHunters bypass PeopleSoft mitigation rules, reviving exploitation of a critical zero-day vulnerability The campaign has expanded globally, targeting organizations across technology, healthcare, government, and other sectors Oracle’s original patch remains effective, while organizations should investigate systems and rotate potentially exposed credentials ShinyHunters have found a way to bypass a mitigation…
Read More
Hackers build fake desktop apps to trick victims into handing over access
Threat actors spoofed major US HR/payroll platforms with fake desktop clients built via Lovable landing pages Victims downloaded a modified ScreenConnect build from GitHub, giving attackers hidden, unattended remote access Campaign shows ~291 downloads; likely targets payroll staff, enabling potential wire fraud through diverted payments Cybercriminals are impersonating large American…
Read More
Citrix says two worrying NetScaler RCE zero-days exploited in attacks
Citrix patched two critical zero‑days (CVE‑2026‑88771, CVE‑2026‑88772) in NetScaler ADC/Gateway, both enabling remote code execution Exploits already observed; CISA added flaws to KEV catalog with a three‑day patch deadline (Sept 30) NetScaler appliances are prime targets due to internet exposure, privileged access, and limited monitoring visibility Citrix has released a…
Read More
‘I broke something’: A Claude Code AI agent deleted 48,000 files in just over 100 seconds — then apologized for doing so
AI coding agent mishandled Windows junctions, deleting ~48,000 live files and corrupting Git object database Incident surfaced on Reddit, with community mocking lack of backups and calling it “classic FAFO” Lesson stressed: always use remote version control (e.g., GitHub) before letting AI touch production work A catastrophic incident caused by…
Read More