NewsroomLatest briefings
Every security and AI story SECBORN has published, newest first.
Build a Hardened Home-Lab WireGuard VPN with Split DNS and Ad and Malware Blocking
Deploy WireGuard on a small Linux server, lock it down with key-only access and a default-deny firewall, and route client DNS through…
DreamHost Confirms Two-Month Breach Exposed FTP and Webmail Credentials
Attackers exploited a vulnerability in DreamHost's web-based File Manager for roughly two months, stealing FTP/SFTP logins and accessing webmail session data before…
Canadian Extradited to US Over Years-Long School Hacking and Cryptomining Scheme
U.S. prosecutors say two Canadian nationals breached supercomputers at universities in New York, Tennessee, North Carolina, and Massachusetts to secretly mine cryptocurrency…
Barracuda Patches Two Critical Flaws Enabling Root Access on Appliances
Barracuda has fixed two vulnerabilities that, if chained, let an attacker with admin interface access bypass authorization and gain root control of…
Google Warns LLMjacking Attacks Can Rack Up $1M in Cloud Bills
Google says attackers are stealing API keys to hijack enterprise access to large language models, racking up fraudulent cloud charges that in…
Red Hat Patches Critical 9.8 Linux Kernel TCP RCE as Ubuntu Fix Lags in Testing
A use-after-free flaw in the Linux kernel's IPv4 TCP stack, rated 9.8 and remotely exploitable without authentication, has fixed builds out for…
Russia Arrests Three in Rare Crackdown on VasyGrek Phishing Gang
Russian police dismantled the infrastructure of the VasyGrek (Fluffy Wolf) cybercrime group with help from Kaspersky, detaining three suspects behind a long-running…
Attackers Exploit Unpatched Max-Severity Flaw in CryptoPayment Gateway Plugin
Researchers warn that threat actors are actively targeting CVE-2026-81648, a critical unpatched WordPress plugin flaw that could expose wallet credentials and allow…
Attackers Actively Exploit Max-Severity Siemens IoT2050 Flaw
VulnCheck says a perfect-10 vulnerability in Siemens SIMATIC IoT2050 Advanced devices is being actively exploited to deploy remote command backdoors, allowing unauthenticated…
26,400 Live Cloud and AI Credentials Found Exposed on Gitee
A researcher scanning 7.25 million public Gitee repositories found tens of thousands of still-working cloud and AI service credentials that developers had…
Belarusian, Ukrainian Hackers Claim Destructive Breach of Russia’s Statistics Agency
The Cyber Partisans and Silent Crow say they spent months inside Rosstat's network before wiping servers and stealing census, mortality and military…
Interpol’s Third Serengeti Sweep Nets 1,462 Arrests, $105M Recovered
Operation Serengeti's third annual run spanned 20 African countries and the US, with law enforcement maturing its approach to cybercrime investigations and…