Geek-Guy.com

Category: Global Security News

Researchers unearth industrial sabotage malware that predated Stuxnet by 5 years

Designed to cripple Iran’s nuclear enrichment program, the 2010 Stuxnet worm set a cybersecurity precedent as the first time a nation escalated its activities from strategic espionage to sabotage in cyberspace. Now, a new discovery suggests such operations were in full swing years before Stuxnet came to light. Researchers from SentinelOne have tracked down samples…

Adaptive Security Leadership in an Expanding Threat Surface

Last week I joined fellow security leaders at CISO Inspire Summit North for a panel discussion on The Expanding Threat Surface: Adaptive Security Leadership for 2026 and Beyond. It was a timely discussion, because the challenge facing security leaders today is not simply more threats. It is more connections, more dependencies, and more complexity. Suppliers, SaaS, identities, automation…

A New Chapter in Alzheimer’s Care Begins in Australia, But Access Remains the Real Test

*]:pointer-events-auto [content-visibility:auto] supports-[content-visibility:auto]:[contain-intrinsic-size:auto_100lvh] R6Vx5W_threadScrollVars scroll-mb-[calc(var(–scroll-root-safe-area-inset-bottom,0px)+var(–thread-response-height))] scroll-mt-[calc(var(–header-height)+min(200px,max(70px,20svh)))]” dir=”auto” data-turn-id=”request-WEB:d157b42f-f595-4291-a196-6b04707088a5-6″ data-testid=”conversation-turn-8″ data-scroll-anchor=”false” data-turn=”assistant”>   This month, it has been announced that Australia is beginning to see the real world impact of its first disease modifying Alzheimer’s therapies, marking a pivotal moment in a field that for decades has struggled to move beyond symptom management.

Smashing Security podcast #465: This developer wanted to cheat at Roblox. It cost millions

A developer at an AI startup wanted to cheat at Roblox. They downloaded a dodgy script on their work laptop. That one decision triggered a cascade of failures that ended with a $2 million data breach affecting hundreds of thousands of organisations. All for some free in-game currency. Meanwhile, there’s a 1980s phone protocol called…

Australia’s Inflation Reality Check: When Policy Levers Pull in Opposite Directions

Australia’s rising inflation is being blamed on global forces and the Reserve Bank, but economists point to a deeper issue: domestic policy settings that may be working against the fight to bring prices under control. Have you wondered why the Treasurer continues to point to the Reserve Bank of Australia, the Middle East, and supply…

cPanel Vulnerability Exposes Servers to Takeover 

An authentication vulnerability in cPanel and Web Host Manager (WHM) is putting web hosting environments at risk, prompting the company to release an emergency patch and warn administrators to act quickly.  The flaw affects multiple authentication paths and could allow attackers to gain unauthorized access to servers if left unpatched. “Let’s call this what it…

Tines Targets Partner-Led Growth in North America

Tines is expanding its channel and technology partner ecosystem as enterprise demand grows for intelligent workflows that connect automation, AI, and human decision-making across security and IT operations. The intelligent workflow platform announced 75 new technology partners for fiscal year 2026, along with 25% growth in its channel partner network.  The company said collaborations with…

CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure

Attackers quickly exploited a critical LiteLLM flaw (CVE-2026-42208) to access and modify sensitive database data via SQL injection. Attackers rapidly exploited a critical vulnerability in LiteLLM Python package, tracked as CVE-2026-42208, just days after it became public. The vulnerability, an SQL injection in the proxy API key verification process, lets attackers access and potentially modify database…

GitHub Flaw Enables Remote Code Execution With a Single Git Push

A vulnerability in GitHub’s infrastructure could have allowed attackers to execute code on backend systems using nothing more than a standard git push command.  The flaw affected both GitHub.com and GitHub Enterprise Server (GHES), exposing millions of repositories to potential compromise before it was patched. “By exploiting an injection flaw in GitHub’s internal protocol, any…

Designing trust and safety into Amazon Bedrock powered applications

Generative AI brings promising innovation, transforming how individuals and organizations approach everything from customer service to content creation and more. As AI continues to expand its capabilities, organizations are increasingly focused on how they can integrate the responsible AI concepts into the development lifecycle of their AI applications. Research from Accenture and Amazon Web Services…

Congress, industry ponder government posture for protecting data centers

The growth of data centers — and adversaries’ targeting of them — left lawmakers at a hearing Wednesday contemplating whether the federal government has the right setup for defending them. Some industry witnesses and experts at the hearing of the House Homeland Security Subcommittee on Cybersecurity and Infrastructure Protection testified that the answer might be…

Dreame Launches More Than 20 Smart Home Products at DREAME NEXT Living Next Showcase, Highlighting Bionic Robotic Arm Platform Expansion

Dreame Technology, a global high-end technology company, today launched more than 20 smart home products and dozens of industry-first technologies at the Living Next segment of DREAME NEXT in San Francisco. The centerpiece of the showcase is the expansion of Dreame’s bionic robotic arm technology into air conditioners, range hoods, steam ovens, and dishwashers, demonstrating how a core capability continuously evolves and compounds across product categories.  Dreame first introduced bionic robotic arm technology in 2023. The technology has since been continuously refined…

Laptop Service Center Dubai Sports City: Why Pro Athletes and Esports Tenants Are Driving a New Repair Cluster

In the latest development, I will talk about Laptop Service Center Dubai Sports City and show you why Pro Athletes and Esports tenants are driving a new repair cluster. Dubai, UAE – A district designed for football academies and motorsport facilities has quietly become one of Dubai’s busiest computer repair zones. Service ticket data from…

SAP npm Packages Compromised by “Mini Shai-Hulud” Credential-Stealing Malware

Cybersecurity researchers are sounding the alarm about a new supply chain attack campaign targeting SAP-related npm Packages with credential-stealing malware. According to reports from Aikido Security, SafeDep, Socket, StepSecurity, and Google-owned Wiz, the campaign – calling itself the mini Shai-Hulud – has affected the following packages associated with SAP’s JavaScript and cloud application

From Mailbox to Revenue: Top 7 Direct Mail Platforms That Actually Deliver Results

In this post, I will show you the top 7 direct mail platforms that actually deliver results. Direct mail is no longer the slow, analog underdog of the marketing world. Today, the most forward-thinking brands are pairing physical mail with data intelligence, automation, and API-driven workflows to outperform purely digital campaigns. Whether you are a…

New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATs

Cybersecurity researchers have discovered malicious code in an npm package after a malicious package as a dependency to the project by Anthropic’s Claude Opus large language model (LLM). The package in question is “@validate-sdk/v2,” which is listed on npm as a utility software development kit (SDK) for hashing, validation, encoding/decoding, and secure random generation. However,…

Internet censorship index reveals Russia’s lead and widespread content blocking

Global study shows targeted internet censorship worldwide, with Russia leading; VPNs, news, and adult content are most frequently blocked categories. The Global Internet Censorship Index 2026 offers a clear view of how governments around the world control online access. Researchers tested 74 popular websites across 53 countries using residential proxies to simulate real users. After…

ReadySteadyPlug receives $1.51 million ARENA funding to accelerate national rollout of affordable EV chargers in apartments

– ARENA funding to accelerate the national rollout of smart strata-based EV charging infrastructure – ReadySteadyPlug’s smart Level 1 solution avoids costly switchboard or infrastructure upgrades with limited upfront contribution from the Owners Corporation – Funding comes amid surging EV demand driven by global fuel crisis

All supported cPanel versions hit by critical auth bug, now patched

cPanel fixed a critical authentication flaw that could let attackers access servers. The issue affects all supported versions. cPanel released security updates to address a critical authentication vulnerability that could allow attackers to gain unauthorized access to its control panel. The flaw affects all supported versions, raising serious risks for exposed servers. cPanel is a…

Netskope, Rubrik, Commvault Expand Google Cloud Security

At this year’s Google Cloud Next 2026 conference in Las Vegas, tech and cybersecurity companies across the channel unveiled their latest announcements spanning AI, security, infrastructure, and more. While artificial intelligence was firmly front and center, themes around enhanced cybersecurity, particularly AI guardrails and cyber resilience, emerged as equally important priorities. In this recap, we…

Today’s Odd Web Requests, (Wed, Apr 29th)

Today, two different “new” requests hit our honeypots. Both appear to be recon requests and not associated with specific vulnerabilities. But as always, please let me know if you have additional information 1 – Broadcom API Gateway GET /bam/restart/if/required Host: [redacted]:8080 Connection: close This request is targeting a Broadcom API Gateway endpoint. As is, the request should…

Visual Studio cloud agents now run inside GitHub Copilot

Microsoft’s April update to Visual Studio introduces cloud agent integration in GitHub Copilot, enabling developers to offload tasks to remote infrastructure for scalable, isolated execution. You can now start cloud agent sessions directly from Visual Studio. Custom agents now support user-level definitions that persist across projects, making it easier to reuse configurations. The update also…

Critical GitHub RCE bug exposed millions of repositories

A critical remote code execution (RCE) vulnerability in GitHub could potentially allow attackers to execute arbitrary code on GitHub.com and GitHub Enterprise Server. Uncovered by Wiz researchers, the now-patched bug exploited how GitHub handles server-side “git push” operations. By crafting malicious input within a standard Git push, an authenticated user could execute arbitrary commands via…

Top Benefits of Cybersecurity Services for Strengthening Business Network Security

In this post, I will talk about the top benefits of cybersecurity services for strengthening business network security. Modern businesses depend on connected systems, cloud tools, mobile devices, and shared data to operate efficiently each day. As networks grow more complex, security risks also increase, making it essential for companies to protect digital assets, communication…

CISA, Microsoft warn of active exploitation of Windows Shell vulnerability (CVE-2026-32202)

Attackers are exploiting CVE-2026-32202, a zero-click Windows Shell spoofing vulnerability that causes victims’ systems to authenticate the attacker’s server, CISA and Microsoft have warned. About CVE-2026-32202 CVE-2026-32202 stems from an incomplete patch for CVE-2026-21510, a vulnerability that, in conjunction with CVE-2026-21513, has been exploited by APT28 (aka Fancy Bear) via weaponized LNK files that bypass…

Critical cPanel Authentication Vulnerability Identified — Update Your Server Immediately

cPanel has released security updates to address a security issue impacting various authentication paths that could allow an attacker to obtain access to the control panel software. The problem affects all currently supported versions, according to an alert released by cPanel on Tuesday. The issue has been addressed in the following versions – 11.110.0.97 11.118.0.63…

AWS leans on prior ingenuity to face future AI and quantum threats

As Amazon celebrates the 20th anniversary of its AWS cloud this year, the world’s biggest cloud computing provider now faces two giant cybersecurity threats — AI and quantum. How the company will navigate these emerging issues to ensure the security and resilience of systems used by its millions of corporate customers remains an evolving question.…

CISA Adds Actively Exploited ConnectWise and Windows Flaws to KEV

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added two security flaws impacting ConnectWise ScreenConnect and Microsoft Windows to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation. The vulnerabilities are listed below – CVE-2024-1708 (CVSS score: 8.4) – A path traversal vulnerability in  ConnectWise ScreenConnect