From Asia to the U.S., Microsoft's outage involving services like Outlook and Teams has dragged on for hours and impacted users, companies and some government operations as the technology giant struggled to fix the issue. Microsoft said the outage was affecting a wide range of Microsoft 365 offerings that interact with its Exchange Online and email services. Services including Outlook, Teams and AI assistant Copilot were reported by users to be down. READ MORE...
The Justice Department on Thursday announced coordinated actions against North Korean groups' campaigns that have stolen billions of dollars in cryptocurrency, seizing cloud infrastructure behind a social engineering scheme known as FaceStealer and the court-authorized seizure of more than $1.2 billion stolen from cryptocurrency exchange Binance. The larger of the two operations is tied to the theft of more than $6 billion in virtual assets from Binance. READ MORE...
On Oct. 29, cyber thieves transferred around $6.34 billion in various cryptocurrencies from at least 11 wallets owned by exchange Binance to attacker-controlled addresses. Binance seemingly had not put in place security controls to quickly detect malicious authorizations and disable them through a pretested kill switch, experts say - which should put other crypto firms on notice. The attackers exploited a feature of Ethereum smart accounts to essentially install malicious code. READ MORE...
Citrix on Thursday announced patches for 28 vulnerabilities in NetScaler ADC and NetScaler Gateway, including nine critical-severity bugs. The critical flaws stem from memory overflow issues in Packet Processing, SMPP traffic, DNS / DNS-over-HTTPS (DoH), NetScaler Push, Email OTP authentication, Endpoint Analysis (EPA/EPAS), and ICA proxy, and could lead to unpredictable/erroneous behavior or denial-of-service (DoS) conditions. READ MORE...
Police in nine countries, working with Europol, took down servers behind the Gootloader, CastleRAT and StealC malware operations this week and recovered more than 6 million credentials stolen from infected computers. Europol announced the action as the latest round of Operation Endgame, the international campaign against the services that give ransomware gangs their way into a network. The suspects sold credentials they had harvested from victims' machines. READ MORE...
I want to talk about AI hacking. There are three aspects: people hacking AI systems, people using AI to hack other systems, and AIs hacking systems on their own, not even maliciously. The last two matter more than the first. The third is the weirdest and potentially the most destabilizing. I started writing about this in 2021 and in my 2022 book, A Hacker's Mind. We're seeing it more and more, especially in the past year. READ MORE...
Certifications play a critical role in keeping up with the latest industry metamorphosis, but artificial intelligence (AI) is now muddying the verification process. From Meta Glasses to AI browsers and deepfakes, exam administrators face a growing list of risks to monitor - and organizations need to know that the person they hired can actually do what their certification says they can. Score legitimacy has become harder to assess as test takers use AI to fill in the blanks. READ MORE...
Lego-owned marketplace BrickLink has been offline for almost a week after identifying "unusual activity on the platform," leaving fans unable to buy and sell spare bricks and minifigures. The company initially described the outage as "necessary work" and said the site would return on November 9. That deadline has come and gone. Visiting BrickLink's domain automatically serves the platform's maintenance page, which was last updated on November 11. READ MORE...
Check Point Software has released emergency hotfixes to address a high-severity flaw that hackers have been exploiting to gain root privileges and establish persistence on vulnerable devices since late October. Tracked as CVE-2026-123039, this local privilege escalation vulnerability was found in the DynamicCLI IPC (Inter-Process Communication) interface used to send privileged command requests to the root-level Gaia OS DynamicCLI (dynamic_server) daemon. READ MORE...
Hackers are actively exploiting a newly disclosed N-able N-central zero-day vulnerability dubbed "4EverAble2Shell" to compromise servers and deploy cryptocurrency miners, with researchers reporting at least 21 affected systems, including 19 running the company's latest security update. The attacks follow security researcher Sean Bales' release of two new zero-day exploits today, dubbed 4EverAble2Shell and Agent2Shell. READ MORE...