TechLogHub Blog — Page 22 of 25
Insights, guides, and product strategy for builders and product teams.
Dutch police disclose phishing breach, say impact limited and citizen data not exposed
The Dutch National Police say a March 2026 phishing attack was caught fast by their SOC with no citizen data exposed, after a 2024 pass-the-cookie hack.
UK sanctions Xinbi, a $24B Telegram crypto marketplace serving scam centres
The UK sanctioned Xinbi, a $24B Telegram-born marketplace that sells stolen data and launders crypto for Southeast Asian scam centres. The US followed.
Russia arrests suspected LeakBase admin weeks after FBI-Europol takedown
Russian police detained a man suspected of running LeakBase, the 142,000-member stolen-data forum seized by the FBI and Europol in March 2026's Operation Leak.
Armenian man extradited to the US over alleged role in RedLine infostealer operation
Hambardzum Minasyan faces three conspiracy counts in Texas over RedLine servers and affiliate payments. Here's why infostealers matter to dev teams.
GitHub adds AI security detections for Shell, Dockerfiles, Terraform and PHP
GitHub's AI code scanning flags Shell, Dockerfile, Terraform and PHP issues that CodeQL misses. How AI Scan works, what it needs and how to enable it on PRs.
PolyShell: Magento file-upload flaw hit 56% of vulnerable stores in days
Sansec saw PolyShell attacks on 56.7% of vulnerable Magento stores days after disclosure. How the upload bug works and the nginx/Apache rules that block it.
Phishers use Bubble no-code apps on bubble.io to steal Microsoft logins
Kaspersky found phishers using redirect apps on Bubble's bubble.io domain to evade email filters and steal Microsoft 365 logins. How it works, how to defend.
Torg Grabber infostealer hits 728 crypto wallets and 103 password managers
Torg Grabber spreads via ClickFix, bypasses Chrome App-Bound Encryption and raids 850 browser extensions, 728 of them crypto wallets. What to lock down.
Citrix NetScaler CVE-2026-3055: SAML IdP memory leak exploited after patch
CVE-2026-3055 leaks memory from NetScaler appliances set up as SAML IdPs and was exploited days after Citrix's fix. How to check, patch and rotate secrets.
Stolen and resold AI accounts and API keys are a growing underground trade
Flare found ChatGPT, Claude, Copilot and Perplexity access resold on fraud forums and Telegram. Why leaked AI API keys feed this trade and how to protect yours.
Kali Linux 2026.1: 8 new tools, kernel 6.18 and a BackTrack mode
Kali Linux 2026.1 adds 8 tools including MetasploitMCP, SSTImap and XSStrike, moves to kernel 6.18 and adds a BackTrack mode. What's new and how to upgrade.
TP-Link patches Archer NX router auth bypass that allows firmware upload
TP-Link fixed four Archer NX router flaws, including CVE-2025-15517, which lets unauthenticated attackers upload firmware. Affected versions and how to patch.
Russian TA551 botnet co-manager gets 2 years over BitPaymer ransomware access
Ilya Angelov, co-manager of the TA551 botnet that sold access to BitPaymer and IcedID crews, got 24 months in a US prison. What it shows about access brokers.
PTC warns of imminent attacks on critical Windchill and FlexPLM RCE flaw CVE-2026-4681
PTC warned of an imminent threat to Windchill and FlexPLM from CVE-2026-4681, a CVSS 10 deserialization RCE. German police alerted firms before patches existed.
LiteLLM 1.82.7 and 1.82.8 on PyPI backdoored in TeamPCP supply-chain attack
TeamPCP published malicious LiteLLM 1.82.7 and 1.82.8 to PyPI on 24 March 2026; 1.82.8 ran a stealer via a .pth file on every Python start. What to rotate.
Firefox 149 adds a free built-in VPN with a 50GB monthly limit
Firefox 149 adds a free browser-only VPN for signed-in users in the US, UK, Germany and France, capped at 50GB a month. What it means for web apps.
Microsoft fixes classic Outlook bug that stopped Gmail and Yahoo accounts syncing
Since 26 Feb 2026 classic Outlook failed to sync Gmail and Yahoo (0x800CCC0E/0F, 0x80070057). Microsoft fixed it on 20 March; stale OAuth tokens may linger.
Dutch Finance Ministry breach traced to zero-day in login software
Intruders hit Dutch Finance Ministry policy systems on 19 March 2026 via a zero-day in its login software. What happened and the lessons for engineering teams.
Mazda says attackers exploited a warehouse system, exposing 692 staff and partner records
Mazda disclosed that attackers exploited vulnerabilities in a parts warehouse system, exposing IDs, names and emails of 692 employees and business partners.
Tycoon2FA phishing-as-a-service back to full volume days after Europol takedown
Europol and Microsoft seized 330 Tycoon2FA domains on 4 March 2026; CrowdStrike says volume fell to 25% then recovered within days. How to defend against AiTM.
Showing 20 of 485 articles