Tag: communications
-
Debian and Ubuntu Linux APT Vulnerability Allows Attackers to Execute Malicious Code With Root Privileges
A vulnerability in the APT package manager lets attackers intercept communications between Linux systems and package repositories, install malicious packages, and execute code with root privileges. This flaw, tracked as CVE-2026-109518, affects Debian, Ubuntu, and their derivative distributions under certain download conditions. Debian disclosed the issue in its DSA-6607-1 security advisory on November 4, 2026,…
-
China-Aligned Hackers Hijack Sogou Input Method DNS Requests to Deploy DarkVigil Backdoor
A China-aligned threat actor known as SlippyNunchucks has been attributed to a Domain Name System (DNS) hijacking operation abusing insecure HTTP communications in Windows versions of Sogou Input Method as part of a surveillance campaign designed to deploy an implant called DarkVigil (aka FDMTP).The campaign, observed starting July 1, 2026, is assessed to have targeted…
-
Oklahoma man charged with mailing threats, substances to election officials nationwide
Robin Patrick Martin was charged with conveying false or misleading information and hoaxes and mailing threatening communications in an effort to intimidate election officials. First seen on cyberscoop.com Jump to article: cyberscoop.com/oklahoma-man-charged-white-powder-letters-election-officials/
-
Oklahoma man charged with mailing threats, substances to election officials nationwide
Robin Patrick Martin was charged with conveying false or misleading information and hoaxes and mailing threatening communications in an effort to intimidate election officials. First seen on cyberscoop.com Jump to article: cyberscoop.com/oklahoma-man-charged-white-powder-letters-election-officials/
-
Oklahoma man charged with mailing threats, substances to election officials nationwide
Robin Patrick Martin was charged with conveying false or misleading information and hoaxes and mailing threatening communications in an effort to intimidate election officials. First seen on cyberscoop.com Jump to article: cyberscoop.com/oklahoma-man-charged-white-powder-letters-election-officials/
-
US FCC Votes to Cut Off Device Testing in China by 2028
Carr Says Labs See Sensitive Product Details Months Before Devices Launch. The U.S. Federal Communications Commission voted Thursday to stop recognizing test labs in China and other countries that won’t accept American testing in return – a move the agency’s chair said gives regulators more oversight of the labs that clear electronics for the U.S.…
-
Cisco Talos Uncovers KeyDrift Malware Targeting SD-WAN Controllers to Steal Network Encryption Keys
Tags: access, cisco, communications, control, cyber, defense, encryption, framework, malware, network, service, technology, threatUAT-11473, an advanced persistent threat actor deploying KeyDrift, a custom malware framework targeting Cisco Catalyst SD-WAN controllers. The framework embeds inside legitimate control-plane processes to maintain access, intercept decrypted communications, and extract sensitive network encryption material. Observed targets span space and satellite services, defense and aerospace technology, and policy research. Talos assesses with high confidence…
-
Sony ISP subsidiary data breach exposes 2.5 million customer records
Sony Network Communications has confirmed a data breach that compromised approximately 2.5 million records containing current and former customers’ personal information. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/sony-isp-subsidiary-data-breach-exposes-25-million-customer-records/
-
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Tags: breach, communications, credentials, credit-card, cyber, data, data-breach, email, Internet, network, passwordSony Network Communications disclosed a data breach that exposed 2,585,481 customer records linked to its So-net and Plala (S Course) internet services. The breach, announced on October 27, 2026, compromised passwords for 54,401 email addresses. However, it did not affect primary membership passwords or credit card information. The compromised database contained 2,141,986 records from So-net…
-
Sony Data Breach Exposes 2.58 Million Customer Records and 54,401 Email Credentials
Tags: breach, communications, credentials, credit-card, cyber, data, data-breach, email, Internet, network, passwordSony Network Communications disclosed a data breach that exposed 2,585,481 customer records linked to its So-net and Plala (S Course) internet services. The breach, announced on October 27, 2026, compromised passwords for 54,401 email addresses. However, it did not affect primary membership passwords or credit card information. The compromised database contained 2,141,986 records from So-net…
-
FCC Moves to Cut Off Device Testing in China by 2028
Regulators Say They Can’t Hold Foreign Labs Accountable for Faulty Results. The Federal Communications Commission votes Thursday on final rules that would strip recognition from test labs in China and other countries that deny reciprocity to U.S. labs – a move backers say closes an enforcement gap in device approvals, though industry is urging regulators…
-
Convergence of Cyber, Space and Electromagnetic Resilience
The C5ISR Imperative for Securing Critical Infrastructure Against Emerging Threats As critical infrastructure becomes increasingly dependent on satellite communications and autonomous systems, cyberthreats and electromagnetic signals pose big risks. C5ISR-based security, multi-orbit connectivity and AI-driven detection can help strengthen resilience across the spectrum. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/blogs/convergence-cyber-space-electromagnetic-resilience-p-4217
-
North Korean Hackers Use Post-Quantum Encryption to Conceal Malware in New Cyberespionage Campaign
Tags: communications, cryptography, cyber, cyberespionage, encryption, finance, group, hacker, infection, korea, lazarus, malicious, malware, north-korea, phishing, software, spear-phishingNorth Korea-linked Lazarus Group used post-quantum cryptography in a cyberespionage campaign targeting South Korean organizations, concealing malware communications and payloads behind a multi-stage infection chain. Dubbed Operation FlashHole, the campaign combined spear-phishing, malicious websites, abuse of financial security software and modular malware that largely operated in memory. The campaign followed Operation SyncHole, a Lazarus operation…
-
Ex-OpenAI Engineer Detained in Spy Device Case as Saudi Royal Contacts Emerge
A U.S. court on Monday granted the U.S. government’s request to detain a former OpenAI engineer accused of planting a recording device in an executive conference room at the company’s San Francisco office to allegedly steal sensitive secrets.In a new court filing Sunday, prosecutors revealed that Abdulrahman Alfozan, a 35-year-old Saudi national, was “in frequent…
-
SonicWall NSM Bugs Let Attackers Intercept Communications and Execute Commands
SonicWall has disclosed two vulnerabilities in its on-premises Network Security Manager (NSM) that could let authenticated attackers escalate privileges, intercept other users’ communications and run operating system commands. The company published the advisory, SNWLID-2026-0018, on October 14, 2026. The highest CVSS v3 score is 8.8 (High). SonicWall NSM vulnerabilities According to advisory SNWLID-2026-0018 published by…
-
FBI arrests OpenAI employee accused of planting hidden recording device in conference room
It’s not clear exactly for what purpose the recording device was used, but FBI director Kash Patel said the scheme was to “capture sensitive communications about the company’s super intelligence technology.” First seen on techcrunch.com Jump to article: techcrunch.com/2026/10/13/fbi-arrests-openai-employee-accused-of-planting-hidden-recording-device-in-conference-room/
-
Inside AvisLoader: A Windows Malware Loader Built to Resist Disruption
A new Windows malware loader called AvisLoader uses encrypted peer-to-peer communications to make command-and-control infrastructure harder to disrupt. Varonis researchers explain how the malware uses ClickFix delivery, shortcut-based persistence, and remote command execution capabilities. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/inside-avisloader-a-windows-malware-loader-built-to-resist-disruption/
-
Cling Botnet Spoofs Google STUN Traffic to Hide Commands Sent to Infected IoT Devices
Cling, an IoT botnet that disguises operator commands as Google STUN replies, blending malicious communications into routine NAT traversal traffic. Published October 1, the research documents exploitation of exposed networking devices and a command channel designed to exploit trust in familiar infrastructure. Researchers discovered the malware while investigating increased exploitation of CVE-2021-35394, a remote code…
-
Cling Malware Masquerades as Google STUN Traffic to Control Compromised IoT Devices
A newly identified IoT botnet, Cling, disguises its command-and-control communications as legitimate STUN traffic, including packets that appear to originate from Google’s public STUN infrastructure. The technique enables attackers to manage compromised internet-facing devices while blending activity into routine NAT-traversal traffic used by real-time communications platforms. Nozomi Networks Labs discovered the campaign while investigating a…
-
Linux Kernel CVE-2026-72018 Flaw Lets Local Attackers Gain Root Access
A high-severity Linux kernel vulnerability, tracked as CVE-2026-72018, lets a local attacker with CAP_NET_ADMIN privileges escalate to root. This exploitation involves an out-of-bounds write in the Shared Memory Communications Direct (SMC-D) DIBS loopback implementation. Researchers at XBOW discovered and demonstrated the flaw, creating a local privilege escalation proof of concept using a constrained 16-byte zero-write…
-
Kiteworks Warns Users to Take Systems Offline Amid Suspected Zero-Day Threat
Kiteworks has urged customers worldwide to temporarily shut down their servers after receiving credible law-enforcement intelligence that a threat actor may target Kiteworks deployments over the weekend. The emergency advisory is preventive, but the company said the potential activity may involve an unknown zero-day vulnerability. The secure file-sharing and managed content communications provider asked organizations…
-
Investigative journalist seeks damages from police over unlawful phone surveillance
Northern Ireland journalist subject to unlawful communications surveillance seeks damages from police in Northern Ireland in high court claim for data protection breaches and harassment First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366651203/Investigative-journalist-seeks-damages-from-police-over-unlawful-phone-surveillance
-
Ban on Discord Lifted After Platform Commits to Work With DICT and CICC
The government has lifted its ban on Discord in the Philippines after the platform’s representatives met with officials from the Department of Information and Communications Technology (DICT) and the Cybercrime Investigation and Coordinating Center (CICC). The CICC is an attached agency of the DICT. The restriction was removed on Thursday, Sept. 24. First seen on…
-
‘Salesbleed’ Exploits Salesforce Agents to Enable Slack Phishing
Agentic AI can smuggle arbitrary instructions from the Web, across multiple apps, into trusted internal communications channels. First seen on darkreading.com Jump to article: www.darkreading.com/application-security/salesbleed-exploits-salesforce-agents-slack-phishing
-
Attackers Exploit Issabel Framework Flaw Enabling Unauthenticated OS Command Execution
A critical security flaw in Issabel Framework, a web-based framework for the open-source unified communications PBX software, has come under active exploitation.The vulnerability in question is CVE-2026-89026 (CVSS v3.1 score: 9.8/CVSS v4.0 score: 9.3), which can allow an unauthenticated remote attacker to execute arbitrary operating system (OS) commands by taking advantage of a hard-coded First…
-
Cyber Op Targets South Korean Media & Automotive Sectors
A likely North Korean advanced persistent threat (APT) group used a previously undocumented Linux espionage toolkit to compromise load balancers, gain access to communications, and further exploit networks. First seen on darkreading.com Jump to article: www.darkreading.com/cyberattacks-data-breaches/cyber-south-korean-media-automotive
-
House Rejects Renewal of FISA 702 Surveillance Program
The House rejection of a short-term FISA Section 702 extension renews the debate over foreign intelligence, warrantless searches of Americans’ communications, privacy and cybersecurity governance. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/house-rejects-renewal-of-fisa-702-surveillance-program/
-
CISA Urges Service Providers to Provide Transparent Updates During Major IT and OT Outages
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released new guidance urging service providers to deliver timely, accurate, and transparent communications during major information technology (IT) and operational technology (OT) outages. The document, titled ‘Communicating Under Pressure: Best Practices for Service Providers’, was developed with the Federal Bureau of Investigation (FBI) and international partners.…
-
CISA head says agency must change quickly to prevent the ‘worst that could happen’
CISA’s cybersecurity, infrastructure security and emergency communications divisions are among the priorities as the agency fills vacancies created at the beginning of the Trump administration, acting director Nick Andersen says. First seen on therecord.media Jump to article: therecord.media/cisa-hiring-nick-andersen-warning