TechLogHub Blog — Page 11 of 25
Insights, guides, and product strategy for builders and product teams.
US charges Google security engineer with Polymarket insider trading
Google security engineer Michele Spagnuolo has been charged with insider trading after allegedly using confidential Google data to place bets on Polymarket, earning about $1.2 million. Prosecutors say he accessed Google's "Year in Search" data labeled "Google Confidential" and, under the alias "AlphaRaccoon" on Poly…
Hackers exploit FortiClient EMS flaw to push infostealer malware
Hackers exploited FortiClient EMS CVE-2026-35616 to deliver EKZ, an undocumented infostealer, by disguising the payload as a Fortinet endpoint update and executing it through FortiClient VPN scripting workflows. The attack uses an authentication bypass to run commands, download EKZ, and exfiltrate credentials, brows…
FBI warns of fake FIFA websites running World Cup fraud schemes
The FBI warns that hundreds of fake FIFA websites are circulating ahead of the 2026 World Cup in the US, Canada, and Mexico to steal personal and financial data, sell fake tickets and hospitality, and run related fraud. Impersonators use minor typos (like fiffa.com) and various non-.com domains, plus fake job portal…
BTMOB Android malware service generates custom phishing payloads
Security researchers warn of BTMOB, an Android remote access trojan sold as malware‑as‑a‑service with a builder to generate customized phishing payloads. The tool can steal data, intercept financial transactions, capture screenshots, and grant remote control, with options to disable Google Play, hide its icon, or pr…
GreyVibe hackers use ChatGPT, Gemini to power cyberattacks
Researchers from WithSecure link the GreyVibe group, a likely Russian threat actor, to a cyber-espionage campaign that uses AI-generated lures and custom malware to target Ukraine-related and other sectors since August 2025. While the operation shows state-aligned traits, experts caution it may lack the discipline o…
Anthropic confirms Claude Mythos-class models will roll out to the public
Anthropic has confirmed that Claude Mythos-class models will roll out to the public in the coming weeks after a delay over security concerns, with Mythos touted as more capable than Opus 4.8 in code reasoning and autonomy. Guardrails are in place, and a small number of organizations are already using a Mythos previe…
Charter Communications data breach affects 4.9 million accounts
Charter Communications confirms a data breach by the ShinyHunters extortion gang affecting 4.9 million accounts, with the attackers claiming to have stolen 42 million Salesforce records including names, emails, addresses, and phone numbers. Charter says no sensitive PI or CPNI data was exfiltrated and authorities we…
Carnival Cruise confirms data breach affecting nearly 6 million people
Carnival Corporation has confirmed a data breach affecting nearly 6 million people after a social engineering attack on its IT systems in April 2026. The ShinyHunters gang claimed responsibility, stating they stole personal data—including names, dates of birth, email addresses, genders, locations, and Holland Americ…
Canadian Man Sentenced to 33 Years for Sextortion Targeting 145 U.S. Children
A Canadian man, 40-year-old Ramanan Pathmanathan, was sentenced to 33 years in a U.S. federal prison after pleading guilty to coercion and enticement of a minor and child pornography production in an eight-year sextortion scheme targeting about 145 children across the United States, some as young as six. He posed as…
GPU mining malware spreads via SEO poisoning, AI chatbots
A new GPU‑mining malware campaign is spreading through SEO poisoning and AI chatbot recommendations, redirecting users seeking common utilities to attacker‑controlled download pages. The attack payload includes a legitimate utility plus a malicious DLL that installs ScreenConnect for persistence, uses process hollow…
Can you enforce strong Active Directory password rules without frustrating users?
Sponsored post arguing that strong Active Directory password policies can be effective without frustrating users. It champions moving from traditional complexity rules to passphrase-based, length-focused standards (minimum 15+ characters, up to 64), and actively blocking weak or breached passwords. It also suggests …
Glassworm botnet disrupted after resilient C2 infrastructure takedown
Researchers have disrupted the Glassworm botnet, which targeted developers through software-supply-chain attacks, by taking down its multi-channel C2 infrastructure. In a coordinated operation, CrowdStrike, Google, and The Shadowserver Foundation blocked four C2 channels that used Solana blockchain memos, BitTorrent…
FBI warns of in-person data theft attacks from extortion gang
The FBI warns that the Silent Ransom Group (aka Luna Moth, Chatty Spider, UNC3753) is targeting U.S. law firms with in-person data theft and extortion, using social-engineering to pose as IT staff and coax remote access, or sending insiders to offices to insert USB drives; indicators include unauthorized USB devices…
CISA gives feds 4 days to patch actively exploited cPanel plugin flaw
CISA has given federal agencies four days to patch a critical, actively exploited vulnerability in the LiteSpeed cPanel user-end plugin (CVE-2026-48172). The privilege-escalation flaw in lsws.redisAble could allow remote attackers with no privileges to execute arbitrary root code, affecting plugin versions 2.3–2.4.4…
Dutch police arrests suspect linked to Ajax football club hack
Dutch police arrested a 35-year-old man from Buren on May 26, 2026, on suspicion of computer trespass tied to a breach of Ajax Amsterdam’s IT systems earlier this year. The attacker allegedly exploited vulnerabilities to access fan data, modify stadium bans, and transfer tickets—affecting thousands of season tickets…
Windows 11 KB5089573 update released with performance improvements
Microsoft released the Windows 11 KB5089573 preview cumulative update for 25H2 and 24H2. This optional, non-security update adds about 30 changes focused on performance and reliability, including faster launches for Start, Search, and Action Center, improved Windows Hello sign-in behavior, and greater reliability in…
KnowledgeDeliver flaw exploited as a zero-day to install web shells
Researchers reveal a critical zero-day in KnowledgeDeliver LMS (CVE-2026-5426) that enables unauthenticated remote code execution via ViewState deserialization by abusing a shared hardcoded ASP.NET machineKey. Hackers deployed the Godzilla/BlueBeam in-memory web shell to take control of servers, sign malicious paylo…
Charter confirms data breach after ShinyHunters extortion threat
Charter Communications confirms a data breach following ShinyHunters’ extortion threat, but says no sensitive personal information or customer CPNI was exfiltrated, even as the group claims up to 40 million records were stolen in an April 1 vishing attack targeting Salesforce data.
CISA Orders Federal Agencies to Patch Actively Exploited Drupal Vulnerability
CISA has ordered Federal Civilian Executive Branch agencies to patch an actively exploited Drupal SQL injection vulnerability (CVE-2026-9082) in the Drupal database abstraction API by midnight on May 27, 2026, under Binding Operational Directive 22-01. Exploitation has been detected in the wild, with Shadowserver tr…
Anthropic’s restricted Claude Mythos model may be coming to Claude Code
Anthropic is moving toward a public rollout of Mythos, a restricted Claude model unveiled in April that shows highly advanced code reasoning and security capabilities, including the potential to autonomously develop cyberattacks. To mitigate risk, the rollout has been delayed while guardrails are put in place, with …
Showing 20 of 485 articles