The US government warns that Russia state hackers are coming after your router
US authorities warn that Russian state hackers are compromising home and office routers to use as proxies for attacks on critical infrastructure sectors worldwide.
Windows 0-day drops the same day Microsoft releases record number of patches
A Windows zero-day exploit called HiveLegacy, released by an anonymous researcher, allows low-privilege accounts to compromise administrator accounts by modifying registry settings.
Sheetz is quitting VMware, migrating 11,000 virtual machines
Convenience store chain Sheetz is migrating approximately 11,000 virtual machines from VMware to StorMagic’s SvHCI platform across its 838 locations, citing Broadcom’s pricing changes and mandatory subscription model.
Microsoft unveils AI security tools it says outperform competing platforms
Microsoft introduced AI security tools designed to identify and reduce security risks, claiming superior performance and lower costs than competing platforms from rivals including OpenAI and Google.
Max-severity Exchange server flaw under active exploitation by Kremlin hackers
Russian state hackers are exploiting a maximum-severity Exchange Server vulnerability to backdoor unpatched machines and steal credentials, using advanced malware deployed through email compromise.
New Pass-ta-key attack reveals all the things we didn’t know about passkeys
A new attack called Pass-ta-key demonstrates how malware on Windows machines can extract passkeys from Google Password Manager, raising questions about the security of this authentication method.