TECHNO CHAT / TECH BLOG

Latest articles — page 17

Cognizant’s TriZetto Subsidiary Reports Data Breach Affecting 3.4 Million Patients

TriZetto Provider Solutions, a healthcare-technology subsidiary of Cognizant, has disclosed a large data breach that exposed the protected health information of 3,433,965 patients. The company classified the incident as an external system hacking event after threat actors gained unauthorized access to TriZetto’s external infrastructure. Timeline and discovery Initial unauthorized access occurred on November 19, 2024. TriZetto did not detect the intrusion until November 28, 2025, meaning the intrusion persisted undetected…

Saugata DattaMar 9, 20262 min read677

Cybersecurity

Clipboard Trap: ClickFix Now Abuses Windows Terminal to Deliver Lumma Stealer

A newly observed wave of ClickFix social-engineering attacks has shifted tactics, hijacking Windows Terminal as its execution environment to deliver credential-stealing malware. Security researchers from Microsoft and other vendors tracked this campaign in early 2026 and reported a reliable pattern: victims are manipulated into pasting an obfuscated command from their clipboard into a legitimate-looking terminal window, which then decodes and executes a multi-stage payload that ultimately harvests browser-saved credentials. Why…

Saugata DattaMar 7, 20264 min read705

Artificial intelligence

When Claude Became a Bug Hunter: How an AI Found 22 Firefox Vulnerabilities in Two Weeks

In February 2026, a focused collaboration between Anthropic and Mozilla demonstrated a new phase in vulnerability research: large language models (LLMs) moving beyond assistance into active, high-throughput discovery. Over a two-week engagement, Claude Opus 4.6 performed deep analysis of the Firefox codebase and surfaced 22 distinct security flaws. The scope and speed of these findings — especially the 14 issues classified as high severity — illustrate how AI is reshaping…

Saugata DattaMar 7, 20264 min read476

Cybersecurity

Admin Account Backdoor: Critical Privilege-Flaw in WordPress User Registration Plugin (CVE-2026-1492)

A critical security flaw in a widely used WordPress membership plugin has made it trivially simple for unauthenticated attackers to create administrator accounts and seize control of affected sites. The vulnerability, tracked as CVE-2026-1492, exposes a systemic weakness in how the plugin handled role assignment during user registration. This post summarizes what happened, who discovered it, the immediate risks, and the concrete steps site owners should take now. What the…

Saugata DattaMar 6, 20263 min read727

Cloud Computing

90 Zero‑Days in 2025: Google’s Snapshot of an Evolving Exploit Economy

Google’s Threat Intelligence Group reported 90 zero‑day vulnerabilities actively exploited in the wild across 2025. That total sits above 2024’s 78 but below the record 100 observed in 2023. Beyond the raw count, the GTIG data reveals a notable shift in where and how these flaws were used, who is using them, and which technical weaknesses continue to drive high‑impact attacks. The raw picture GTIG split the 90 exploited zero‑days…

Saugata DattaMar 6, 20263 min read708

Automation

From Tunnel to Cloud: The 2026 Strategy Guide to Self‑Hosting vs Third‑Party VPN

In 2026 the boundary between "VPN" and "personal cloud" is fuzzier than ever. A third‑party VPN still sells one‑click privacy and wide geo-hopping, but for many users that convenience now trades away transparency, extensibility, and long‑term value. Renting a small VPS and running WireGuard, AdGuard Home, Vaultwarden, and automation tools like n8n converts a disposable privacy tool into a persistent private cloud you control. This guide helps you decide which…

Saugata DattaMar 6, 20265 min read657

Artificial intelligence

GPT-5.4 Lands: A Reasoning Powerhouse That Writes Code, Uses Your Computer, and Thinks Ahead

OpenAI’s March 2026 release, GPT-5.4, reads like a careful step toward AI that can carry an entire project from first idea to final delivery. It isn’t just a faster chatbot or a slightly smarter code generator — it’s a consolidated system that bundles advanced reasoning, strong coding skills, and native computer-use capabilities into a single model. The result is a platform designed for sustained, multi-step professional workflows where the model…

Saugata DattaMar 6, 20265 min read636

Cloud Computing

VoidLink Malware Framework: Key Points on How It Targets Kubernetes and AI Workloads

Title: VoidLink Malware Framework: Key Points on How It Targets Kubernetes and AI Workloads Overview VoidLink is a modular malware framework observed targeting cloud-native environments, with emphasis on Kubernetes clusters and AI infrastructure. Goal: persistence, lateral movement, data exfiltration, and abuse of compute (e.g., model theft, crypto-mining, or training/serving misuse). Modularity enables plugins for container escape, kubeconfig harvesting, and targeted abuse of GPU resources. Threat model Targets: misconfigured clusters, exposed…

Saugata DattaMar 5, 20264 min read521

Cloud Computing

Laser Highways: Taara’s Free‑Space Optics Bring Fiber Speeds Without the Dig

Open-air laser links are no longer a laboratory curiosity. Taara, a spinout from an experimental research lab, is shipping systems that aim to deliver fiberlike throughput across streets, between buildings, and even over urban kilometers—without the expense and delay of trenching fiber. The appeal is simple: where fiber exists nearby but legal, financial, or logistical barriers prevent a direct connection, a carefully steered beam of infrared light can bridge the…

Saugata DattaMar 5, 20265 min read628

AWS

When Drones Hit the Cloud: AWS Middle East Outage Disrupts 109 Services

A series of drone strikes against Amazon Web Services facilities in the Middle East triggered one of the most significant regional outages in AWS history, disrupting services across the ME-CENTRAL-1 (UAE) region and causing collateral damage in the nearby ME-SOUTH-1 (Bahrain) region. The incident began in the early hours of March 1, 2026, and left many customers scrambling to fail over workloads and recover data for days. Incident timeline and…

Saugata DattaMar 5, 20264 min read494

Hacking and Exploits

Bitwarden Adds Passkey Login Support for Windows 11

Bitwarden now supports using passkeys stored in its vault to sign into Windows 11 devices, enabling passwordless, phishing-resistant authentication. The feature is available to all Bitwarden plans, including the free tier. How it works On the Windows sign-in screen, users choose the security key sign-in option and scan a QR code with a mobile device. The passkey stored in the user’s Bitwarden encrypted vault responds to the cryptographic authentication challenge…

Saugata DattaMar 5, 20262 min read710

Azure

Enhanced Storage Resiliency with Azure NetApp Files Elastic Zone‑Redundant Service

Data resiliency is a baseline requirement for modern enterprise applications. Short interruptions or data loss can cascade into regulatory, financial, and reputational consequences. Azure NetApp Files (ANF) Elastic zone‑redundant storage (ANF Elastic ZRS) is a managed, multi‑AZ file storage option built on Azure’s ZRS architecture that aims to deliver synchronous multi‑zone replication, automatic failover, and enterprise ONTAP data management features in a single volume. This post summarizes the service’s capabilities,…

Saugata DattaMar 5, 20264 min read708

Latest articles — page 17

Free Tools: IP, DNS, SSL