A threat actor uploaded malicious packages to the Arch User Repository (AUR) that imitated two popular utility tools, yay and paru. AUR is a community-maintained, widely used package index for Arch Linux and derived distributions that hosts package build scripts (PKGBUILDs) for third-party and proprietary tools, beta versions or older package versions that are no … Read more
Microsoft has fixed a known issue that resulted in black screens, desktop loading issues, and Explorer crashes after installing Windows 11 updates released since August. As Microsoft explained last month when it confirmed the issue, affected users experienced several symptoms, most commonly a black screen after logging in, not being able to access their desktop … Read more
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited to attack firewalls. The vulnerability affects the PAN-OS management interface and allows authenticated attackers with network access to execute code as root on vulnerable devices. Palo Alto Networks confirmed in a safety notice announced on … Read more
The US Department of Justice (DoJ) has disrupted the operations of the Famous Chollima threat group by arresting two suspects, charging 14 people and seizing nearly 187 laptops used in North Korean remote IT worker programs. The famous Chollima (aka WageMole) is often tracked as a North Korean threat actor associated with fraudulent IT worker … Read more
Microsoft has fixed a known issue that resulted in connection issues with Always On VPN after installing the Windows 11 September 2026 security updates. The Always On VPN The remote access solution replaces legacy DirectAccess technology and works with domain-joined, non-domain-joined, and Microsoft Entra ID-joined Windows 10, Windows 11, and Windows Server devices. Always On … Read more
A Saudi OpenAI engineer has been arrested for allegedly planting a hidden recording device in an executive conference room at the company’s San Francisco offices to secretly record confidential conversations. The US Department of Justice announced on Tuesday that 35-year-old Abdulrahman Alfozan, who had worked at OpenAI since July 2025, was arrested on October 9 … Read more
An engineer at OpenAI has been accused of secretly installing a recording device in a conference room in what officials said Tuesday was an attempt to record sensitive conversations about the company’s technology. The employee was identified as a 35-year-old Saudi citizen Abdulrahman AlfozanAccording to a criminal complaint filed in federal court in San Francisco, … Read more
A critical heap buffer overflow vulnerability (CVE-2026-39919) in the Ghostscript interpreter and rendering engine could allow remote code execution via specially crafted PDF files. The flaw was discovered on August 23 by researchers at Defiant platform Wordfence using their AI-powered system Argus. Ghostscript is a PostScript and PDF interpreter that can render PDFs as images, … Read more
Meta is notifying around 1,500 people, most of them employees in the US, that their personal data was compromised after hackers broke into some of the company’s GitHub repositories. The break-in was discovered a few weeks ago. According to the tech giant, an outside group gained access to the repositories using an employee’s stolen credentials. … Read more
Russian cloud service provider Yandex said drone strikes damaged three of its data centers, forcing it to close two facilities and partially paralyze a third. Yandex customers are experiencing service outages. Some of them report that they cannot access files stored in the company’s cloud infrastructure. The affected data centers are located in Sasovo (attack … Read more