SectionResearch
New techniques, papers and threat intelligence.
Kali Linux 2026.3 Lands With Six New Pentesting Tools and KDE Plasma 6.7
The third Kali release of 2026 adds tools for XSS scanning, crawling, port scanning and SMB credential hunting, alongside a kernel bump…
FCC Blocks First Devices Under New Ban on Huawei-Linked Surveillance Chips
The FCC rejected a wireless video transmitter and a dashboard camera built with HiSilicon chips, marking the first enforcement under rules that…
Revolut Outage Knocks Out Banking Services Worldwide
A widespread service disruption hit Revolut on Tuesday, blocking sign-ins, card payments, transfers, and other core features for tens of thousands of…
Judge Rejects WhatsApp’s Contempt Bid Against NSO Group Over Injunction Breach
A federal judge ruled WhatsApp did not provide enough concrete evidence to prove NSO Group violated a court order barring it from…
MITRE ATT&CK v20 Adds AI Abuse, MFA Bypass, and Water Utility Attack Techniques
The latest ATT&CK release expands coverage of prompt injection, application-specific password theft, CAPTCHA bypass, and real-world intrusions against water utilities in Minnesota…
North Macedonian Police Arrest Alleged Admin of OLVX Cybercrime Marketplace
A joint operation with the FBI led to the arrest of a suspect accused of running OLVX, a marketplace that sold stolen…
Ransomware Negotiator Charged With Conspiracy to Extort Victims
A well-known cybersecurity executive who built a career helping companies respond to ransomware attacks is now himself facing federal extortion charges.
Norway Hits Microsoft’s Xandr With $9.6M Fine Over Grindr Data Sharing
Datatilsynet says Xandr exposed sensitive sexual orientation data of Grindr users to thousands of advertisers without valid consent, in what it calls…
Let’s Encrypt to Default New Certificates to 64-Day Validity Starting 2027
Let's Encrypt is shortening the default lifespan of TLS certificates to 64 days beginning in February 2027, a stepping stone toward an…
Malicious GitHub Actions Workflow Hits 340+ Repos via Hijacked Maintainer Accounts
Attackers compromised at least two prominent open-source maintainer accounts to push a credential-stealing GitHub Actions workflow across hundreds of repositories, researchers say.
Malware at Karaoke Giant’s Contractor Exposes 8.6 Million Records
A malware infection on a contractor's employee computer has exposed personal data tied to Japan's largest karaoke chain operator, Daiichi Kosho, affecting…
Ransomware Negotiation Exec Arrested in ShinyHunters-Linked Extortion Case
Canadian cybersecurity executive Edward Dubrovsky was arrested in Pennsylvania on conspiracy and extortion charges amid the FBI's ongoing crackdown on the ShinyHunters…