‘MadeYouReset’ HTTP/2 flaw lets attackers DoS servers Summary Researchers Gal Bar Nahum, Anat Bremler-Barr and Yaniv Harel disclosed a common design flaw in many HTTP/2 implementations, dubbed “MadeYouReset,” that lets…
Russia Restricts Calls Via WhatsApp and Telegram Summary Russian authorities have announced partial restrictions on voice calls made through foreign messaging apps, notably WhatsApp and Telegram. Regulator Roskomnadzor said the…
What the LockBit 4.0 Leak Reveals About RaaS Groups Summary The May 2025 compromise of LockBit’s 4.0 affiliate panel exposed thousands of chats, ransomware builds and cryptowallet data, revealing a…
Google Chrome Enterprise: Keeping Businesses Safe From Threats on the Web Summary At Google’s “There’s No Place Like Chrome” event, Dark Reading’s Terry Sweeney speaks with Jason Kemmerer of Google…
Whispers of XZ Utils Backdoor Live on in Old Docker Images Summary Binarly has identified remnants of the infamous XZ Utils backdoor in older Docker Hub images, primarily Debian-based images…
Popular AI Systems Still a Work-in-Progress for Security Summary New research from Forescout evaluated 50 large language models (LLMs) on offensive-security tasks and found that general-purpose LLMs are only partially…
Patch Now: Attackers Target OT Networks via Critical RCE Flaw Summary Researchers at Palo Alto Networks Unit 42 have observed active exploitation of a critical remote code execution (RCE) vulnerability…
Russia curbs WhatsApp, Telegram calls to counter cybercrime Summary Russian authorities have restricted voice and video calls on WhatsApp and Telegram, saying the move aims to prevent fraud, extortion and…
North Korea Attacks South Koreans With Ransomware Summary A Scarcruft (aka APT37) subgroup called ChinopuNK has rolled out a multiphase campaign against targets in South Korea that combines infostealers, backdoors…
Fortinet Products Are in the Crosshairs Again Summary Fortinet disclosed a critical unauthenticated command-injection remote code execution vulnerability in FortiSIEM (CVE-2025-25256), and practical proof-of-concept exploit code is already circulating. The…
