ShinyHunters Claims Massive FBI Data Breach, Says Thousands of Agents Affected
Cybercriminal group ShinyHunters claims it has breached the FBI and stolen sensitive information belonging to thousands of agents and job applicants.
Bijay Pokharel,
September 23, 2026
2 min read
How to Check if Your Webcam or Microphone Is Being Accessed Without Permission
Worried that an app may be using your webcam or microphone without permission? Here's how to check camera and microphone access on Windows, Mac, Android and iPhone.
Bijay Pokharel,
September 23, 2026
6 min read
WordPress 7.1.1 Released With Important Security Fixes
WordPress 7.1.1 has been released with 11 security fixes and other improvements. Users are advised to update their websites as soon as possible.
Bijay Pokharel,
September 22, 2026
1 min read
New BigDiskBuster Exploit Can Block Microsoft Defender Updates
Security researcher Nightmare Eclipse has released BigDiskBuster, a proof-of-concept that can interfere with Microsoft Defender platform and security intelligence updates.
Bijay Pokharel,
September 22, 2026
1 min read
Zyxel GS1900 Switches Targeted in Active Attacks, CISA Warns
Attackers are actively exploiting CVE-2026-7273 in Zyxel GS1900 switches, with CISA urging organizations to patch affected devices.
Bijay Pokharel,
September 22, 2026
2 min read
WordPress Click2Shell Flaw Enables Remote Code Execution
A newly disclosed WordPress Core vulnerability dubbed Click2Shell can allow attackers to force-install themes and execute PHP code when a logged-in administrator visits a crafted URL.
Bijay Pokharel,
September 22, 2026
2 min read
Google Fined €403 Million Over GDPR Location Data Violations
Ireland’s Data Protection Commission has fined Google €403 million over GDPR violations involving the processing, transparency and retention of users’ location data.
Bijay Pokharel,
September 22, 2026
2 min read
SolarWinds Fixes Critical ARM Vulnerability Allowing Remote Code Execution
SolarWinds has released a security update for Access Rights Manager to fix CVE-2026-28326, a high-severity vulnerability that could enable unauthenticated remote code execution.
Bijay Pokharel,
September 20, 2026
2 min read
WordPress Click2Shell Flaw Lets Attackers Force Theme Installs
WordPress has patched the Click2Shell vulnerability, a high-severity flaw that could allow attackers to force logged-in administrators to install a theme using a specially crafted URL.
Bijay Pokharel,
September 20, 2026
4 min read
Google Gemini Accessed Real Companies During AI Security Test
Google’s Gemini AI model accessed protected systems belonging to real companies during a cybersecurity evaluation in May 2026, according to a report by The Wall Street Journal.
Bijay Pokharel,
September 20, 2026
2 min read
How to Spot a Fake Tech Support Pop-Up Before You Call
Fake tech support pop-ups can look like serious security warnings. Here's how to recognize the common signs and avoid calling a scammer.
Bijay Pokharel,
September 20, 2026
6 min read
Foreign Hacker Target Two Colorado Water Systems, Officials Say
Foreign hackers targeted and manipulated equipment at two small water systems in Colorado in late August, according to the office of Colorado Governor Jared Polis.
Bijay Pokharel,
September 19, 2026
2 min read
Critical Check Point Flaw Allows Unauthenticated Root Code Execution
Check Point has released a security update for a critical vulnerability in its Security Management and Log Servers that could allow an unauthenticated attacker to execute code with root privileges over the network.
Bijay Pokharel,
September 18, 2026
3 min read
FBI Seizes NightmareStresser Domains Linked to Thousands of DDoS Attacks
The U.S. Federal Bureau of Investigation (FBI) has seized the domains used by NightmareStresser, one of the longest-running distributed denial-of-service (DDoS) platforms.
Bijay Pokharel,
September 17, 2026
2 min read
BIND 9 Update Fixes 14 Security Flaws, Including DoH Crash Bug
ISC has released new BIND versions to fix 14 security vulnerabilities, including a high-severity flaw that can crash DNS servers handling DNS-over-HTTPS requests.
Bijay Pokharel,
September 17, 2026
6 min read
Gyazo Data Breach Exposes 23.6 Million User Records and Image Metadata
A security breach at Gyazo, Helpfeel’s image-sharing service, has exposed about 23.62 million user records along with metadata linked to roughly 490 million images, the Kyoto-based company said.
Bijay Pokharel,
September 17, 2026
3 min read
Cisco ISE Flaw Under Active Exploitation With Maximum Severity Score
Tracked as CVE-2026-76460, the flaw carries a CVSS score of 10.0 and could allow an unauthenticated remote attacker to bypass authentication and gain unauthorized access to affected systems.
Bijay Pokharel,
September 17, 2026
3 min read
How to Tell If You’ve Been Hit by a Zero-Day Attack Before It’s Too Late
Zero-day attacks can be difficult to detect because they exploit vulnerabilities that vendors may not know about yet. Here are the warning signs to watch for and what to do if you suspect your device or network has been compromised.
Bijay Pokharel,
September 17, 2026
6 min read
Google Fixes Actively Exploited Android Zero-Day on Pixel Devices
Google’s September 2026 Pixel security update fixes 110 vulnerabilities, including a high-severity zero-day that the company says may be under limited, targeted exploitation.
Bijay Pokharel,
September 16, 2026
2 min read
Acronis Warns of Actively Exploited Linux Privilege Escalation Flaw
Acronis has warned of CVE-2026-87886, a high-severity Linux privilege escalation vulnerability affecting its cPanel, WHM, and Plesk backup integrations.
Bijay Pokharel,
September 16, 2026
2 min read
