N-able Pulls Hosted N-central Offline After a Researcher Publishes 30-Plus Unpatched Flaws With Working Exploit Code 
A Factory-Default ‘admin’ Password Let Researchers Hijack Two Car Brands’ App Accounts, Then Unlock and Start a Test Car 
Singapore Warns That a Perfect-10 Metabase Flaw Is Still Being Used to Take Over Dashboards Without a Login 
SonicWall Warns of an Exploited SSL VPN Flaw That Can Skip SAML and MFA: Patch Gen7 and Gen8 Firewalls Now 
A Password Longer Than 256 Characters Can Unlock Accounts That Should Have No Password: Patch Alpine and Other musl SSH Servers Now 
Russia-Linked Spies Turned Exchange Servers Into Their Own Command Post. Layered Defenses Still Beat Any Single Product
Here Is How Layered Defenses Protect the Mail Server Attackers Want to Live OnMost malware has to phone home, and...
Chrome’s Eighth Exploited Zero-Day of 2026 Is Fixed. Here Is the Year’s Timeline, and Why Restarting the Browser Matters
Google has shipped another emergency Chrome update after confirming that attackers already have a working exploit for a newly reported...
N-able Pulls Hosted N-central Offline After a Researcher Publishes 30-Plus Unpatched Flaws With Working Exploit Code
One of the tools managed service providers use to run thousands of client computers is dark today, on purpose. N-able...
Shut It Down, Unplug, Call IT: How Vanderbilt Responded as a New Ransomware Gang Claimed Its Network
On Monday morning, Vanderbilt University’s students, faculty and staff received an unusual instruction: turn your university device off, get off...
Apple Fixes an iMessage Flaw That Could Let an Outsider Join Your Group Chat: The Spec Sheet and an Update Checklist
Group chats have quietly become a business tool. Sales teams coordinate deals in them, managers share schedules and family-run firms...
SEGA Says 2.2 Million Newsletter Emails Leaked Through Its Mailing Vendor. Your Questions on the ARARA Breach, Answered
When a company hands its mailing list to an outside email service, it also hands over part of its security....
Outlook.com Has Started Bouncing Mail From Domains With No DMARC Record. Layered Email Authentication Beats Any Single Fix
Here Is How Layered Email Authentication Keeps Your Messages DeliveredIf customers with Hotmail or Outlook.com addresses suddenly say your invoices...
Former OpenAI Engineer Pleads Not Guilty in Hidden-Recorder Case: A Timeline of the Insider Threat Prosecutors Describe
A former OpenAI engineer accused of hiding a recording device in an executive meeting room has entered a plea of...
AI Agents Made Old 1024-Bit RSA Keys Cheaper to Attack: The Spec Sheet, Plus a Key-Size Checklist for Your Systems
Encryption strength is usually treated as a fixed fact. New research from Google DeepMind is a reminder that it is...
An AI Hacking Agent ‘Escaped’ Its Test Lab and Breached WorkOS. The Doors It Walked Through Were Ordinary Ones
When WorkOS disclosed a breach of an internal sales application last week, the story already had a modern twist: the...