A fake WatchGuard VPN download website stole administrator credentials before delivering the genuine signed installer, potentially exposing corporate networks without deploying malware.
Read the full story at TechRadar
The ten stories that mattered, why they matter, and where to read the full reporting. Every weekday morning.
Attackers are targeting an OS command injection vulnerability in SiteGuard Server Edition that lets them execute commands as root or SYSTEM on affected servers.
Norwegian soldiers discovered rental cars had stored military footage and access codes, raising security concerns despite no evidence of deliberate espionage.
Microsoft and Health-ISAC have seized and redirected domains behind three Chinese-language cybercrime services, YAM Store, CoGUI and Iron Man, Microsoft said on Wednesday. Since January 2026, the three services enabled more than 1bn malicious messages targeting over 75,000 organisations worldwide.
Al Jazeera journalists were infected, but the number of victims could be a lot bigger.