Skip to content
Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet

Between November 2025 and March 2026, the Dutch security firm Eye Security pushed more than 2 million updates to computers it did not own to switch off a background updater that it said could have… 

Trade recurring Microsoft 365 fees for a  lifetime Office 2021 license on one PC

Trade recurring Microsoft 365 fees for a $28 lifetime Office 2021 license on one PC

TL;DR: Skip recurring Microsoft 365 fees with a lifetime license to Microsoft Office Professional 2021 for Windows, now $27.97 through November 1 (MSRP $219.99). If you’d rather avoid another annual software bill, Microsoft Office Professional… 

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

CISA Flags Two Actively Exploited Critical Flaws in Collabora Online and Arista VeloCloud

Ravie LakshmananOct 24, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two vulnerabilities impacting Collabora Online Built-in CODE Server and Arista VeloCloud Orchestrator (VCO) to its Known Exploited… 

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Systems Missing Revocations

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The activity, which singled out diplomatic entities in Tajikistan, Uzbekistan, and Turkmenistan in early 2026,… 

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Ruby Fixes Three Regex Engine Bugs Responsible for Four Critical GitLab RCE Flaws

Swati KhandelwalOct 23, 2026Vulnerability / Software Security Ruby has released versions 4.0.9, 3.4.12, and 3.3.13 to fix three bugs in Onigmo, the regular expression engine built into the language. The bugs lie behind four critical… 

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Exposed Infrastructure Reveals How Ransomware Affiliates Used AI Agents to Execute Intrusions

Cybersecurity researchers have discovered an artificial intelligence (AI)-driven intrusion ecosystem run by affiliates of the INC and The Gentlemen ransomware groups. Central to the operation is an “Autonomous Red Team Kill Chain Framework” referred to…