Telegram’s t.me short-link domain is working again after a registry-level suspension temporarily removed it from the Domain Name System and broke links worldwide. The outage…
Google and Microsoft have removed ModHeader from their browser extension stores after researchers found dormant surveillance code inside the legitimate, signed extension. The code could…
ServiceNow has fixed a critical vulnerability that could allow an unauthenticated remote attacker to execute code within the ServiceNow AI Platform. The sandbox escape flaw,…
The U.S. Department of the Treasury has sanctioned First VPN Service, also known as 1VPNS, for allegedly providing network infrastructure to ransomware groups and other…
Microsoft will make passkeys the default authentication experience in Microsoft Entra ID starting September 1, 2026, as it prepares to retire its native SMS and…
A campaign involving 148 npm packages used student web proxies to turn visitors’ browsers into sources of distributed denial-of-service traffic. The packages promoted functional tools…
SAP has released its July 2026 security updates, led by a critical memory corruption vulnerability in SAP NetWeaver Application Server ABAP. The flaw, tracked as…
The UK and 11 partner countries have warned that hackers linked to Russia’s Federal Security Service are actively compromising poorly configured routers around the world.…
CISA has warned that Russian state-sponsored hackers are actively exploiting CVE-2008-4128, an 18-year-old cross-site request forgery vulnerability in end-of-life Cisco IOS devices. The flaw can…
A recent Qilin ransomware intrusion involved DCSync activity designed to extract sensitive credentials from Active Directory. The attacker used the domain’s built-in Administrator account to…
February 10, 2026
1 comment 
