8+ hour, 25+ min ago   (997+ words) This week’s roundup covers a massive Microsoft Patch Tuesday with two exploited zero-days, active FortiGate exploitation, a critical PAN-OS root-level RCE flaw, the Revolut KYC data breach, and more than 20 other stories spanning AI-driven cyberattacks, browser and firewall zero-days, and…...

1+ day, 2+ hour ago   (591+ words) Nightmare Eclipse published a proof-of-concept on GitHub on September 9, 2026. The exploit reads arbitrary files as SYSTEM on fully patched Windows 10, Windows 11, and Windows Server systems running the September 2026 security updates. It is the third consecutive bypass of the same component…...

1+ day, 8+ hour ago   (300+ words) Lazarus has steadily upgraded FudModule’s delivery mechanism over four years, and the trajectory tells its own story about how APT groups adapt to defender countermeasures. FudModule is the most documented example of an “EDR-killer” rootkit, but it sits inside a…...

1+ day, 17+ hour ago   (221+ words) Hello, welcome to a fool’s guide to cybersecurity: Today we’re talking about worms and viruses. A computer virus is a type of malware that attaches itself to another file or program known as a host file and then spreads when…...

3+ day, 18+ min ago   (602+ words) Multiple espionage groups have been using a new exploit kit dubbed BlueMoon in seemingly opportunistic and rushed deployments, cybersecurity firm Proofpoint reports. The China-linked APT Violet Typhoon (also tracked as APT31, JungleBamboo, TA412, and Tide Castle) was the first to use it…...

1+ day, 21+ hour ago   (438+ words) The Server Was Already Logged In — Race Conditions Part 2: Hidden Windows By // l1m1nal_3ntr0py — — — — — — — — — — — — — — — — — — — — — — — — — …...

2+ day, 12+ hour ago   (947+ words) Secure boot is a UEFI firmware feature that checks every bootloader against a signature database before it runs. If the signature is missing or untrusted, firmware refuses to hand off control. The boot process stops right there instead of loading…...

3+ day, 3+ hour ago   (355+ words) Published on September 11, 2026 BlueMoon exploit kit chains Windows and Chrome zero-days in targeted attacks, giving cyber-espionage groups a way to execute code, escape Chrome’s sandbox, and gain elevated Windows privileges. Proofpoint observed attacks involving BlueMoon starting on August 28, 2026, while Volexity…...

3+ day, 8+ hour ago   (117+ words) CVE-2026-75650 lets attackers inject PHP through Magento's email template system, then triggers execution automatically. Multiple threat groups are already inside. The authentication gap has reached the payment layer. Simultaneously, a separate attacker group has been observed dropping a 485-byte PHP…...

3+ day, 19+ hour ago   (451+ words) Daily Tech News Show A special thanks to all our supporters–without you, none of this would be possible. If you enjoy what you see you can support the show on Patreon, Thank you! Send email to [email protected] IDScan Confirms…...