TECHNO CHAT / TECH BLOG

Latest articles — page 8

Google’s Quick Share Gains Tap-to-Share Mode with Pixel 11

Alongside the Pixel 11 announcement, Google has upgraded Quick Share with a tap-to-share mode that makes transferring contacts, photos, videos and other items between Android devices near-instant. The company describes the feature as an “instant, two-way exchange”: bring two compatible Android phones close together and the devices complete the transfer with a simple tap. The update is rolling out now to many Pixel models and will expand to select Samsung…

Saugata DattaAug 12, 20263 min read186

Cybersecurity

Attackers Exploit VMware vCenter Vulnerability to Gain Persistent Remote Access

A newly disclosed critical flaw in VMware vCenter (CVE-2026-59310) has moved quickly from patch release to active exploitation, according to investigative reporting and telemetry from security firms. The vulnerability—a directory traversal bug that allows an actor with network access to execute arbitrary code—was patched by Broadcom late last month, and forensic evidence collected by QUIRSO indicates attackers were able to chain that weakness into persistent remote access on production appliances…

Saugata DattaAug 12, 20264 min read236

Cloud Computing

Ransomware Strikes Colombian Justice Ministry Ahead of Presidential Transition

Colombia's Ministry of Justice was hit by a ransomware attack on August 2, affecting parts of its IT infrastructure and degrading several public-facing services just days before a national presidential handover. The disruption touched systems used for illicit-drug monitoring and legal processes; while some files were encrypted, the acting minister at the time, Cielo Rusinque, said publicly that there was no evidence of data exfiltration. The incident arrived amid heightened…

Saugata DattaAug 12, 20264 min read171

Microsoft

Microsoft Confirms July Windows Update Is Causing Some Dell Laptops to Shut Down and Overheat

Microsoft has acknowledged that a recent Windows 11 preview update has caused a limited number of Dell laptops to experience unexpected shutdowns, higher operating temperatures, rapid battery drain, and reduced performance. The issue was first flagged during Dell’s internal testing and later confirmed by Microsoft on July 14, 2026. A specific Intel driver interacting with a newly introduced Windows USB-C Connection Manager appears to be the root cause. The problem…

Saugata DattaJul 16, 20263 min read184

Cybersecurity

CISA Flags Actively Exploited Adobe ColdFusion Path Traversal (CVE-2026-48282)

Adobe ColdFusion administrators woke up to an urgent warning this week: a critical path traversal vulnerability (CVE-2026-48282) is being actively exploited in the wild. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the flaw to its Known Exploited Vulnerabilities (KEV) catalog on July 7, 2026, and issued a binding remediation timeline for federal agencies under BOD 26-04 that requires action by July 10, 2026. Because ColdFusion is frequently internet-facing…

Saugata DattaJul 8, 20264 min read237

Cybersecurity

70% of WordPress Sites Running Outdated PHP Versions, Leaving Millions Exposed

A recent analysis of publicly accessible WordPress installations has revealed a startling reality: a large majority of sites are running PHP versions that are no longer supported, creating a widespread and avoidable security risk. While WordPress itself issues regular updates, the underlying server-side language many sites rely on—PHP—has lagged behind in adoption. The result is an ecosystem where millions of sites are exposed to known vulnerabilities, automated scanning, and opportunistic…

Saugata DattaJul 8, 20264 min read251

Cloud Computing

Microsoft Extends Windows 10 Extended Security Updates Through October 2027

Microsoft has quietly extended its consumer Extended Security Updates (ESU) program for Windows 10, pushing the cutoff for critical security patches out another year to October 12, 2027. The move gives millions of users who have not yet migrated to Windows 11 additional time to receive important and critical security fixes, while Microsoft continues to encourage upgrades to the newer OS. For those already enrolled in the consumer ESU program,…

Saugata DattaJun 26, 20263 min read201

Cybersecurity

Russia Used Cellebrite’s UFED to Breach an Activist’s iPhone — and the Tools Kept Working

In June 2021, Russian authorities seized the devices of opposition figure Andrey Pivovarov and, according to a forensic report later analyzed by Citizen Lab, used traces of Cellebrite’s Universal Forensic Extraction Device (UFED) to extract messages and search for political names. The case is striking because it appears to show forensic use of Cellebrite technology months after the company publicly said it had terminated contracts with Russian customers — raising…

Saugata DattaJun 26, 20264 min read192

Cybersecurity

Photo ZIP Campaign Targets Hospitality Industry with Node.js Implant for Persistent Access

Microsoft Threat Intelligence has identified an active, multi-stage intrusion campaign that has targeted organizations in the hospitality and hotel industry since April 2026. Attackers delivered browser-downloaded photo-themed ZIP archives that contained executable shortcut files disguised as images. When opened, these shortcuts kicked off an obfuscated PowerShell chain that fetched a Node.js–based implant, established dual registry persistence, and initiated command-and-control (C2) communications over non-standard ports. Observed post-compromise behaviors include beaconing to…

Saugata DattaJun 26, 20265 min read188

Cybersecurity

Palo Alto GlobalProtect CVE-2026-0257: Active Exploitation and Urgent Steps for Defenders

Palo Alto Networks has warned that a recently patched authentication bypass in PAN-OS GlobalProtect, tracked as CVE-2026-0257, is now being actively exploited in the wild. The vulnerability allows attackers to bypass authentication controls and establish unauthorized VPN connections when devices are configured with specific authentication override cookie and certificate settings. Organizations running GlobalProtect should treat this as urgent: apply vendor patches, review configurations, and hunt for signs of exploitation immediately.…

Saugata DattaMay 31, 20264 min read187

Cybersecurity

Project Glasswing and Mythos Preview: What 10,000+ AI-Found Vulnerabilities Mean for Software Security

In the weeks since Anthropic unveiled Project Glasswing and the Mythos Preview model, a startling new reality has emerged: AI can now find critical flaws across the software stack at an unprecedented scale. Early collaborators and independent testers report thousands of high- and critical-severity findings across essential infrastructure and widely used open-source projects. That rapid discovery is a boon for defenders—if we can solve the bottleneck that remains: human triage,…

Saugata DattaMay 23, 20265 min read215

Cybersecurity

cPanel compromise: CVE-2026-41940 and the Filemanager backdoor

A critical cPanel/WebHost Manager flaw tracked as CVE-2026-41940 is being actively exploited to deploy a cross-platform backdoor known as Filemanager. Security researchers tied the activity to a threat actor using the handle Mr_Rot13, and observed rapid, automated scanning and exploitation from thousands of attacker IPs worldwide. The attacks move quickly from an initial authentication bypass to persistent access via injected SSH keys, PHP web shells, credential theft, and eventual deployment…

Saugata DattaMay 12, 20265 min read276

Latest articles — page 8

Free Tools: IP, DNS, SSL