Cyber
Medical software giant Epic pauses product development to fix security bugs
The creator of the MyChart system is shifting its focus to fixing security vulnerabilities that pose risks to patient data.
Tag
#Cybersecurity
The latest news, analysis and stories about Cybersecurity — TECC.UZ.
96 articles
Cyber
Russian state hackers use new RedFlick technique to push malware
The Russian state-sponsored group Star Blizzard has adopted a new malware installation tactic called RedFlick to deploy its CosmicPulse backdoor.
AI
AI's Third Wave: Coworkers Break the Security Model That Worked for Agents
Persistent AI coworkers are challenging traditional security models, highlighting the urgent need for dedicated identities and scoped permissions.
Cyber
Hackers exploit Citrix NetScaler zero-day to deploy web shells
Cybersecurity firms report that attackers are exploiting a Citrix NetScaler zero-day vulnerability to deploy custom web shells and malware.
Cyber
ShinyHunters uses WAF bypass trick in Oracle PeopleSoft attacks
The notorious extortion gang ShinyHunters is bypassing security defenses to exploit a vulnerability in Oracle PeopleSoft servers.
Cyber
Microsoft warns September Windows updates may break Always On VPN connections
Microsoft has warned that the September security updates can disrupt Always On VPN connections on certain Windows 11 systems.
Cyber
Apple @ Work Podcast: Phishing simulations for the AI era
The latest Apple @ Work podcast episode features experts from Sublime Security discussing tailored phishing simulations and modern cybersecurity in the age of AI.
Cyber
WordPress Click2Shell flaw lets hackers execute PHP on the server
Technical details and a proof-of-concept exploit have been published for a new WordPress cross-site request forgery vulnerability dubbed Click2Shell.
Cyber
Fake LastPass Authenticator on GitHub Pushes Rapuncel Infostealer
A malicious campaign leverages SEO-optimized GitHub repositories to impersonate popular software and distribute a new infostealer dubbed Rapuncel.
Cyber
Brevo Supply-Chain Attack Injected ClickFix Scripts on Customer Sites
Brevo confirmed a security breach where attackers stole a Cloudflare API key to inject malicious ClickFix scripts into its websites and embedded customer JavaScript files.
Cyber
Malware bypasses browser checks to force install Chrome and Edge extensions
Active since mid-2025, a banking malware operation is using the KREMLIN toolkit to install malicious browser extensions that steal sensitive data.
AI
Cloudflare: Stay discoverable in search while disallowing AI training
Cloudflare offers a way to maintain search engine visibility while blocking web content from being scraped for AI model training.
Cyber
Malicious Admin Menu Editor Pro Plugin Backdoors 1,500 WordPress Sites
A compromise of the Admin Menu Editor Pro plugin maintainer's website led to malicious updates creating hidden admin accounts across thousands of WordPress sites.
Cyber
We gained admin access to Baseten's production GitHub in 25 minutes
Security researchers managed to gain administrative access to Baseten's production GitHub environment in just 25 minutes.
AI
Fleet Device Management joins Anthropic’s Project Glasswing to research AI-powered endpoint security
Fleet has joined Anthropic’s controlled-access program Project Glasswing to evaluate how frontier AI can strengthen device management security and bridge the response gap.
IT
Microsoft: September updates cause RDS failures on Windows Server
Microsoft has confirmed reports that the September 2026 security updates cause Remote Desktop Services (RDS) failures on Windows Server systems.
IT
Microsoft releases emergency Windows updates to fix RDS failures
Microsoft has rolled out emergency out-of-band Windows updates to resolve Remote Desktop Services failures and related issues.
Cyber
AdaptHealth Confirms 4.1 Million People Exposed in July Cyberattack
Healthcare company AdaptHealth has confirmed that the data of 4.1 million people was exposed during a July cyberattack attributed to ShinyHunters.
Cyber
New Microsoft Defender 'ShieldCrash' Zero-Day Grants SYSTEM Access
An anonymous security researcher known as Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named ShieldCrash following the September 2026 Patch Tuesday updates.
Cyber
Hackers Breach F5 BIG-IP APM Devices to Deploy Linux Rootkit
A sophisticated Linux rootkit targeting F5 BIG-IP APM environments can intercept PHP file loading and inject fileless web shells directly into memory.
IT
Microsoft releases Windows 11 cumulative updates KB5124008 and KB5122880
Microsoft has rolled out cumulative updates KB5124008 and KB5122880 for Windows 11 versions 25H2, 24H2, and 23H2 with security fixes.
Cyber
SAP warns of maximum severity OVERPASS kernel vulnerability
SAP has addressed 20 vulnerabilities across multiple products in its September security updates, including a maximum-severity memory corruption flaw in the SAP Kernel code.
Cyber
220 million traveler records exposed in Vietnam-linked APIS leak
An exposed Advance Passenger Information System database has leaked over 200 million records containing sensitive passenger and crew details.
Cyber
ConnectWise warns of new ScreenConnect flaw without patch
ConnectWise has shared temporary mitigation measures for a new ScreenConnect vulnerability ahead of an official patch expected later this week.