Barracuda devices face root-access flaws after patch warning
Barracuda Networks warned customers to patch two vulnerabilities…
Updated 3 minutes ago
Tech news, decoded.
AI, security, automation, cloud and self-hosting — explained without the noise.
Trending now
Latest articles
Fresh from the blog: news, security alerts and hands-on how-tos. Keep scrolling for more.
Ubuntu’s kernel fix queue moves on CVE-2026-98432
Ubuntu has placed early Linux kernel fixes for CVE-2026-98432 in the -proposed pocket for 22.04 LTS and newer releases. The flaw can let a remote user run commands as root without a login or any user action, and the patches are still in testing. Kernel versions and patch status Canonical’s security team says the flaw sits in the way the Linux kernel sets up IPv4 TCP connections, and it affects…
Anthropic introduces virtual machine endpoint monitoring for Claude Cowork
Anthropic has launched a beta integration allowing organizations to deploy endpoint detection and response sensors within the local virtual machine used by Claude Cowork. The new capability fills a monitoring gap where standard security software on a host computer cannot inspect shell commands or code execution occurring inside the isolated guest environment. By placing a sensor inside the virtual machine, teams can forward activity data directly to their established security…
Windows 11 backup restore summary improves device migration
Microsoft has added a Restore Summary to Windows 11 26H2, and it is meant to improve visibility for backup and restore tasks during device migration. The feature is part of the latest preview update and Microsoft has shared guidance on how it works. Windows 11 26H2 and its rollout At the end of last month, Microsoft confirmed that Windows 11 26H2 was rolling out to all supported PCs, including Windows…
Apple revenue reaches record 114.5 billion dollars as iPhone sales climb
Apple announced its fourth quarter 2026 earnings results, including a record September quarter revenue of 114.5 billion dollars. This figure represents a 12 percent increase compared to the same period last year. While the iPad and Wearables segments saw declining sales, the overall revenue growth was driven by performance in the iPhone and Mac categories. Financial performance across product lines Net income for the quarter reached 30.7 billion dollars, which…
WorkOS sales application access exposes customer business records
WorkOS has disclosed unauthorized access to an internal sales application that exposed customer contact details and records of business conversations. The company detected the security incident on October 30, 2026, and released a security bulletin on November 2 after identifying an AI-powered offensive security framework used to automate the attack. Automated reconnaissance and exploitation framework The incident involved the use of an AI-assisted framework that automates reconnaissance and exploitation attempts.…
Guardz and Palo Alto add Prisma Browser protection for small businesses
Guardz has integrated Prisma Browser for Business from Palo Alto Networks into its Agentic Workspace Security platform for managed service providers. The update links browser protection with email, identity, endpoint, data and user risk so small businesses can investigate and respond to threats across the workspace.Browser defense now covers phishing links, malware checks and browser-based AI useGuardz protects browser activity alongside email, identity and endpoint signals. A phishing email can…
Google cuts off the XCPE Android botnet and bars Videostrong devices
Google and industry partners have dismantled the XCPE botnet after linking it with more than 1.3 million Android TV streaming boxes. The company says the malware was built into devices made by Videostrong Technology Co and used to generate revenue through cybercrime. Google says the disruption also cut off command-and-control servers tied to more than a dozen related malware families, which affected at least 10 million additional compromised devices. Those…
Windows WinSock driver exploit proves SYSTEM access from a local flaw
A public exploit for CVE-2023-21768 shows that a local attacker can reach SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. The code targets vulnerable Windows 11 22H2 systems, and the flaw was already patched in January 2023 rather than newly disclosed. How the flaw was identified Valentina Palmiotti, known as chompie, and Ruben Boonen published the code. IBM published their technical analysis on March 21, 2023. The issue…
ChatGPT fake billing notices use live operator polling to steal cards
Fake billing emails tied to ChatGPT Plus are leading recipients to payment pages built to collect credit card details and one-time passwords. Fortra identified the phishing operation and documented its infrastructure in research published on October 26, 2026. What the billing lure collects The campaign starts with an email that pretends to be an OpenAI payment notice and says a subscription payment failed. It asks the recipient to update billing…
Hackers pose as AI bots to hunt for passwords and keys
Hackers are using the names of ChatGPT, Claude, Perplexity, and other AI services to disguise automated scanning for passwords, API keys, and cloud credentials. Cequence researchers tied the activity to a single actor impersonating about 32 AI bots, and the campaign affected organizations across several sectors. What the impersonation campaign tested The operation was built to see whether businesses would let requests through simply because they appeared to come from…
Microsoft says attackers used Teams support lures to steal certificates
Microsoft says attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs and then abused insecure Active Directory Certificate Services settings to obtain login certificates for privileged accounts, including one for a domain controller. In one of two intrusions, the attackers copied company data to an external server, and Microsoft did not link the activity to any known group. What the intrusions…
Offline iPhones can still lose crypto seed phrase security
Older iPhones used for storing cryptocurrency seed phrases can still face physical attacks, and airplane mode does not stop that risk. OneKey founder Yishi warned that wiping an aging iPhone and keeping it offline does not turn it into a secure cold wallet. What bootrom access changes The concern centers on BootROM flaws that let an attacker run code before iOS begins. That access does not automatically reveal protected wallet…