A Borrowed Certificate Was All It Took: Canonical Fixes a Perfect-10 Flaw in LXD and MicroCloud
LXD is Canonical’s tool for running containers and virtual machines on Linux, and MicroCloud groups several LXD machines into a...
L7 News
One Text Message Can Knock an Unpatched Android Phone Off the Network: Your Questions About the “SMS of Death” Answered
A researcher has published working code for an Android bug that lets anyone with the right message knock a phone...
Chainalysis Says an AI-Driven Attacker Got Into Its Internal Tools: What Was Taken, What Was Not, and What Is Still Unclear
Chainalysis builds blockchain analytics tools that police, government agencies, crypto exchanges and banks use to follow money through cryptocurrency transactions....
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used
If anyone building software for your business uses Northflank, today is a good day to change passwords and keys. The...
A Password Reset Will Not Undo This: How Two Intrusions Turned a Fake Support Call Into Certificates for Privileged Accounts
Here Is How Layered Defenses Close the Certificate GapMost businesses that run Windows networks have heard about fake help desk...
A Cleared Defense Contractor Lent His Identity to North Korea’s Remote Job Scheme. A Video Call That Did Not Match Helped Expose It
John Allen Kurrle Jr. had what remote job fraudsters want most: a real American identity and an active Top Secret...
A 9.8 Linux Kernel Bug Can Hand Over Root Remotely on Some Servers: Your Questions on CVE-2026-98432, Answered
A newly disclosed Linux kernel vulnerability has drawn two very different severity ratings, and the gap between them is the...
One Click on a Shared ChatGPT Link Was Enough to Read Someone’s Private Chats. OpenAI Has Fixed It. Here Is How the Trick Worked
Shared ChatGPT conversations get passed around all the time: in email, in team chats, in support tickets and on social...
All Three Links Now Patched: How the Ivanti Connect Secure Attack Chain Went From Zero-Day to Full Fix, and What the Attackers Were After
Earlier this month, Ivanti Connect Secure customers learned that attackers had a way into their VPN gateways that needed no...
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners
Most security bugs live in code that runs all the time. This one lives in a moment: the few seconds...
