Cybersecurity

Al Jazeera journalists were infected, but the number of victims could be a lot bigger.

ConnectWise has shut down customer access to its Cloud Backup service (formerly SkyKick Cloud Backup) after hackers accessed application identities and compromised Microsoft 365 tenants.

Drupal has patched two critical vulnerabilities that could allow attackers to execute code remotely on websites running any supported version of the content management system.

“Pre-LLMs a Chrome full chain would take a team of four around 6-9 months to be produced, our first submission took 2 months. The awarded one? six days,” XBOW researcher Brendan Dolan-Gavitt wrote in a technical write-up.

Canada’s planned surveillance law is the latest grim step in a series of threats to encryption that are spreading around the world.

Porch security is the best, easiest safety project for anyone new to smart homes.

“This was not a vulnerability in any Meta product, and Meta’s internal systems were not breached,” a Meta spokesperson told SecurityWeek. Hackers got into some of Meta’s GitHub repositories and took personal data on about 1,500 people.

Cybersecurity researchers are sounding the alarm related to an active campaign in which unknown threat actors are abusing a compromised Microsoft 365 (M365) credential belonging to ConnectWise Cloud Backup (formerly SkyKick) to gain unauthorized access to customers' M365 environments.

DNA Shield provides offline storage for critical digital assets, data that must remain unchanged and protected from emerging threats and technologies

Researchers warn that hackers could soon exploit a maximum-severity vulnerability (CVE-2026-103849) affecting Magento and Adobe Commerce, potentially allowing them to execute arbitrary PHP code on store servers.

Despite Illinois’ sanctuary laws, local police in and around Chicago helped ICE investigative agents track activists engaged in First Amendment–protected activities.

A local privilege escalation exploit published today gains root on OpenBSD 7.9 by chaining a roughly 37-year-old integer overflow with a separate kernel flaw, bypassing OpenBSD's KARL kernel-address randomization and its SMAP and SMEP hardware protections.

The terrifyingly informative new map layer reveals all the cameras around you.

Candiru spyware was delivered to devices at Al Jazeera Media Network via targeted online advertisements in a zero-click attack that required only rendering the malicious ads on the victim's device.

Someone hacked network-attached devices to install... legitimate software? For nefarious purposes, still.

Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with Taiwan research organizations to direct victims to an adversary-in-the-middle (AitM) phishing framework designed to harvest their Google…

MapQuest has added a surveillance layer to its app that shows known outdoor cameras and licence plate readers, including those made by Flock Safety. Users can switch it on in Map Options, next to the traffic and incidents layers. The update follows a surge in MapQuest downloads in September.

• TechRadarMapQuest will now show you where Flock cameras are on the map

Hundreds of thousands of spam emails are carrying .ics attachments or calendar invites.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform . Making Apple devices work-ready and enterprise-safe is all we do.

Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records.