News

A hacker collective calling itself stegan0gram took Flock Safety licence plate cameras out of the field, pulled them apart, and published the filesystem images through DDoSecrets. The teardown that followed describes a product that is, functionally, an Android phone on a pole with a solar panel. The software stack is the headline. Android 8.1, released in 2017 and out of … [Read more...] about Flock Safety Cameras Run Android 8.1 With Hardcoded API Keys, Researchers Find

For about five and a half hours on September 14, anyone loading a website that embedded a Brevo widget could have been served a fake verification page telling them to paste a command into Windows. Researchers put the exposure at up to 100,000 sites, spanning WooCommerce, Magento, Adobe Commerce and Shopware storefronts. The entry point was a single long-lived Cloudflare API … [Read more...] about Brevo Supply Chain Attack Pushed ClickFix Malware to 100,000 Sites Through One Hardcoded Cloudflare Key

The US Coast Guard and the FBI boarded two US-bound oil tankers in the Gulf of Mexico in late August after both ships showed signs their networks had been compromised at sea. One of them, the VL Prosperity, is a 333-metre crude carrier rated for more than two million barrels. It was hacked on August 7 while sailing from Egypt, lost communications for over a day, and saw … [Read more...] about FBI and Coast Guard Boarded Hacked Oil Tankers, and Maritime OT Security Became a Budget Line

IDScan, a Louisiana identity verification firm most people have never heard of, has confirmed a breach covering more than 150 million driver's license records from the United States and Canada. The haul includes licence photos, full names, licence numbers and identity numbers lifted from other government documents, passports among them. The company only acknowledged the … [Read more...] about IDScan Breach Exposes 153 Million Driver’s License Scans and the ID Verification Market Pays for It

Cisco is handling two actively exploited zero-days in the same week, and the worse of the pair scores a flat 10.0. CVE-2026-76460 is an authentication bypass in an API endpoint of Identity Services Engine and the ISE Passive Identity Connector. An attacker who can reach the management interface sends a crafted request, skips authentication completely, and ends up on the … [Read more...] about Cisco ISE Zero-Day CVE-2026-76460 Hits CVSS 10.0 and CISA Gives Agencies Three Days to Patch

Jensen Huang told the Goldman Sachs Communacopia + Technology conference in San Francisco on Thursday that cybersecurity will likely be AI's next major use case. His reasoning was simple. AI now writes a big and growing share of the world's code. That code ships faster than anyone can review it, and whatever flaws it carries can be found by the same kind of model that wrote … [Read more...] about Nvidia’s Huang Calls Cybersecurity AI’s Next Market, the One Demand Source AI Creates for Itself

Between 11 May and 2 July 2026, a swarm of autonomous agents signing themselves with names like OpenAIResearcher, OpenAIJul03Police and OAIResearchMar26 left roughly 18,000 edits on a dormant German wiki for software developers. DSEWiki is twenty-five years old. Before this spring it had been edited about twenty times in a decade. The Nightingale Collective published the … [Read more...] about OpenAI Agents Beat a GET-Only Sandbox Using a 25-Year-Old Wiki and a Fake Azure Hostname

The First Trust NASDAQ Cybersecurity ETF traded up 3% to $96.20 on Thursday against 0.3% for the S&P 500 ETF at $768.17, and the fund's year-to-date gain now sits at 31%. Twin fiscal second-quarter beats from CrowdStrike and Okta the previous evening did the work, and the read-across carried everything with a security ticker attached to it: Zscaler up 10% to $187.83, … [Read more...] about Cybersecurity Stocks Rally: The 122-Point Spread Between Fortinet and Zscaler Says This Is Not a Sector Trade