TECHNO CHAT / TECH BLOG

Latest articles — page 6

Apple revenue reaches record 114.5 billion dollars as iPhone sales climb

Apple announced its fourth quarter 2026 earnings results, including a record September quarter revenue of 114.5 billion dollars. This figure represents a 12 percent increase compared to the same period last year. While the iPad and Wearables segments saw declining sales, the overall revenue growth was driven by performance in the iPhone and Mac categories. Financial performance across product lines Net income for the quarter reached 30.7 billion dollars, which…

Saugata DattaNov 3, 20263 min read82

Cloud Computing

WorkOS sales application access exposes customer business records

WorkOS has disclosed unauthorized access to an internal sales application that exposed customer contact details and records of business conversations. The company detected the security incident on October 30, 2026, and released a security bulletin on November 2 after identifying an AI-powered offensive security framework used to automate the attack. Automated reconnaissance and exploitation framework The incident involved the use of an AI-assisted framework that automates reconnaissance and exploitation attempts.…

Saugata DattaNov 3, 20263 min read89

Azure

Guardz and Palo Alto add Prisma Browser protection for small businesses

Guardz has integrated Prisma Browser for Business from Palo Alto Networks into its Agentic Workspace Security platform for managed service providers. The update links browser protection with email, identity, endpoint, data and user risk so small businesses can investigate and respond to threats across the workspace.Browser defense now covers phishing links, malware checks and browser-based AI useGuardz protects browser activity alongside email, identity and endpoint signals. A phishing email can…

Saugata DattaNov 3, 20262 min read94

Cloud Computing

Google cuts off the XCPE Android botnet and bars Videostrong devices

Google and industry partners have dismantled the XCPE botnet after linking it with more than 1.3 million Android TV streaming boxes. The company says the malware was built into devices made by Videostrong Technology Co and used to generate revenue through cybercrime. Google says the disruption also cut off command-and-control servers tied to more than a dozen related malware families, which affected at least 10 million additional compromised devices. Those…

Saugata DattaNov 3, 20263 min read95

Cybersecurity

Windows WinSock driver exploit proves SYSTEM access from a local flaw

A public exploit for CVE-2023-21768 shows that a local attacker can reach SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. The code targets vulnerable Windows 11 22H2 systems, and the flaw was already patched in January 2023 rather than newly disclosed. How the flaw was identified Valentina Palmiotti, known as chompie, and Ruben Boonen published the code. IBM published their technical analysis on March 21, 2023. The issue…

Saugata DattaNov 3, 20263 min read95

Artificial Intelligence

ChatGPT fake billing notices use live operator polling to steal cards

Fake billing emails tied to ChatGPT Plus are leading recipients to payment pages built to collect credit card details and one-time passwords. Fortra identified the phishing operation and documented its infrastructure in research published on October 26, 2026. What the billing lure collects The campaign starts with an email that pretends to be an OpenAI payment notice and says a subscription payment failed. It asks the recipient to update billing…

Saugata DattaNov 2, 20263 min read92

Hacking and Exploits

Hackers pose as AI bots to hunt for passwords and keys

Hackers are using the names of ChatGPT, Claude, Perplexity, and other AI services to disguise automated scanning for passwords, API keys, and cloud credentials. Cequence researchers tied the activity to a single actor impersonating about 32 AI bots, and the campaign affected organizations across several sectors. What the impersonation campaign tested The operation was built to see whether businesses would let requests through simply because they appeared to come from…

Saugata DattaNov 2, 20263 min read84

Microsoft

Microsoft says attackers used Teams support lures to steal certificates

Microsoft says attackers posing as IT support on Microsoft Teams talked employees into giving them remote control of their PCs and then abused insecure Active Directory Certificate Services settings to obtain login certificates for privileged accounts, including one for a domain controller. In one of two intrusions, the attackers copied company data to an external server, and Microsoft did not link the activity to any known group. What the intrusions…

Saugata DattaNov 2, 20265 min read106

Cybersecurity

Offline iPhones can still lose crypto seed phrase security

Older iPhones used for storing cryptocurrency seed phrases can still face physical attacks, and airplane mode does not stop that risk. OneKey founder Yishi warned that wiping an aging iPhone and keeping it offline does not turn it into a secure cold wallet. What bootrom access changes The concern centers on BootROM flaws that let an attacker run code before iOS begins. That access does not automatically reveal protected wallet…

Saugata DattaNov 2, 20263 min read104

Cybersecurity

Northflank investigates reported AI key misuse after a security incident

Northflank is investigating a security incident tied to reported misuse of AI keys, while warning that environment variables across workloads, secret groups, and global settings may have been exposed. It has not confirmed the entry point, identified an attacker, or disclosed affected customers. Timeline of the response Northflank’s published timeline starts with a Wiz threat alert at 11:43 UTC on October 30, 2026. Engineers reviewed the alert one minute later…

Saugata DattaNov 2, 20262 min read102

Hacking and Exploits

Windows WinSock ancillary flaw gets public exploit proof of concept

A public proof-of-concept exploit for CVE-2023-21768 shows how a local attacker can reach SYSTEM privileges through the Windows Ancillary Function Driver for WinSock. Valentina Palmiotti, known as chompie, and Ruben Boonen published the code, and their full exploit targets vulnerable Windows 11 22H2 systems. How the flaw was studied IBM published the researchers’ technical analysis on March 21, 2023. The issue had already been patched in January 2023, so the…

Saugata DattaNov 2, 20263 min read101

Cybersecurity

Synology warns of ongoing C3RB3R ransomware attacks on NAS devices

Taiwanese network-attached storage maker Synology says attackers are using a vulnerability fixed in December 2024 to hit devices running outdated versions of DiskStation Manager. The company says the attacks are meant to encrypt data and extort ransom, and it has urged users to update right away. Synology C3RB3R attack details Synology told users to enable automatic updates and move their DiskStation Manager software to the latest version. In a Thursday…

Saugata DattaNov 2, 20263 min read96

Latest articles — page 6

Free Tools: IP, DNS, SSL