TP-Link Faces Growing Legal Pressure Over Router Security Router manufacturer TP-Link Systems is facing lawsuits from four more US states over claims relating to cyber security, privacy and the company’s links with China. Florida, Iowa, Montana and Nebraska filed cases on 6 October, joining Texas, which launched its own action earlier this year. The lawsuits […]
GitLab’s Latest Security Flaw Scores an Unwelcome Perfect 10 When a vulnerability receives a CVSS score of 10.0, it is generally not the sort of perfect score anyone is hoping for. GitLab has released security updates addressing CVE-2026-97229, a maximum-severity vulnerability affecting both its Community Edition and Enterprise Edition software. Under certain conditions, the flaw […]
Your New Budget Phone Might Come With an Unwanted Extra Buying a new phone normally means removing a few unwanted apps, changing the wallpaper and wondering why you agreed to quite so many notifications. Some owners of low-cost Android phones have been getting something rather less welcome: malware already installed inside the device firmware. Researchers […]
Hackers Turn Up the Heat on French Supermarkets Cyber attacks normally bring to mind stolen passwords, encrypted laptops or a worrying email from the IT department. In France, however, attackers decided to target the frozen peas. Hundreds of supermarkets have been affected by a major cyber attack involving internet-connected refrigeration systems. Attackers were able to […]
Berlin Tells Cyber Extortionists: “We’re Not Paying!” Berlin’s state government has confirmed it is facing an extortion attempt following the compromise of its administrative network, and officials have made one part of their response very clear. They’re not paying. Investigators discovered additional data had been removed from systems belonging to Berlin’s Senate Department for Mobility, […]
Five WordPress Security Problems You Don’t Want to Ignore Everyone and their dog has created a website using WordPress (even us!), but that doesn’t mean its inheritently secure. WordPress administrators have been handed another compelling reason to check the updates page. Security researchers have disclosed five critical WordPress vulnerabilities affecting WPMU DEV Dashboard, Avada, TranslatePress, […]
Fire Ant Moves Into the Network’s Best Seat Fire ant, a China-linked cyber espionage operation, not the insects have been targeting some of the most trusted equipment inside corporate networks, including Cisco routers and authentication servers. And controlling the router is rather more useful to an attacker than compromising another laptop. Investigators from Sygnia discovered […]
Hackers Are Now Trying to Scare the AI Cyber attackers have found another unusual way to hide malware: convincing the artificial intelligence analysing it that it would rather not look. Russia-aligned threat group UAC-0099 has been observed using a technique researchers have named GuardBreaker. Instead of simply attempting to hide malicious code through encryption or […]
Check Point VPN Flaw: Passwords Optional, Apparently Check Point warned that CVE-2026-50751, a critical flaw affecting Remote Access VPN and Mobile Access deployments using deprecated IKEv1, is being actively exploited. The logic flaw in certificate validation allows unauthenticated attackers to bypass password requirements and establish VPN sessions under specific configurations. Exploitation requires remote access or […]
