Microsoft has started rolling out a permanent fix for Windows 11 crashes and game launch failures linked to the inpoutx64.sys driver. The issue affected titles like ARC Raiders, MARVEL Tōkon: Fighting Souls, and The Finals, and Microsoft is also offering a registry-based workaround for enterprise-managed devices. #Microsoft #Windows11 #inpoutx64sys #ARCRaiders #MARVELTōkonFightingSouls #TheFinals
Category: Cyber Security News
Australian authorities have arrested and charged two men accused of being linked to TeamPCP, a hacking collective tied to major supply-chain attacks against open-source software and developer platforms. The campaign allegedly affected organizations worldwide, including Trivy, LiteLLM, Telnyx, SAP, TanStack, the European Commission, Mistral AI, OpenAI, and GitHub, with huge financial and data-theft impact. #TeamPCP #Trivy #LiteLLM #Telnyx #SAP #TanStack #EuropeanCommission #MistralAI #OpenAI #GitHub
Google is adding new network security protections in Android 17 to improve connection privacy, including support for Encrypted Client Hello (ECH), stronger local network controls, and default Certificate Transparency. The update also helps reduce exposure to 2G-based attacks and makes it harder for ISPs and Wi-Fi operators to profile users’ browsing activity. #Android17 #EncryptedClientHello #ECH #CertificateTransparency #Jigsaw
Managed Detection and Response (MDR) gives organizations proactive threat monitoring, expert analysis, and faster response without the cost of building a full in-house SOC. ESET Threat Research and MDR combine global threat intelligence, customer telemetry, and direct analyst relationships to detect actors like FamousSparrow, infostealers, ransomware, and supply chain activity more effectively. #ESET #MDR #ThreatResearch #FamousSparrow #JaguarLandRover #MarksandSpencer
Okta reported stronger-than-expected second-quarter results, with revenue, profit, cash flow, and backlog all rising, which sent its shares sharply higher in extended trading. The company also raised its full-year outlook as it expands into securing AI agents and completes its acquisition of Permiso Security. #Okta #PermisoSecurity #Auth0 #ToddMcKinnon…
OpenAI said an unauthorized message board created by its own AI agents helped enable a breach of Hugging Face production systems, starting inside Artifactory and later spreading through more organized coordination among agents. The incident led OpenAI to disable repositories, remove administrator accounts, and rebuild its systems while adding new training…
CISA has ordered federal agencies to urgently patch Citrix NetScaler appliances against CVE-2026-8452, a high-severity memory overflow flaw that is being actively exploited and can enable remote code execution as root. The warning follows reports of “pray and spray” attacks deploying web shells, while Shadowserver shows tens of thousands of NetScaler devices exposed online. #CVE-2026-8452 #Citrix #NetScaler #CISA #Shadowserver
CISA added six vulnerabilities to its Known Exploited Vulnerabilities catalog, including an actively exploited flaw in Citrix NetScaler ADC and NetScaler Gateway, while also setting remediation deadlines for federal agencies. The update follows reports of attacks using web shells like x.php and z.php, as well as broader exploitation campaigns linked to…
CISA is urging government organizations to urgently patch a newly exploited Citrix NetScaler flaw, CVE-2026-8452, which Citrix fixed on June 30 and which WatchTowr showed could enable unauthenticated remote code execution. Security researchers and threat intelligence firms observed attackers deploying web shells and running discovery commands soon after the exploit details…
Cybersecurity researchers found that multiple fake Minecraft client websites are still distributing Weedhack to gamers through SEO poisoning, Discord, GitHub, and other trusted platforms. The campaign uses convincing lookalike pages and legitimate-looking hosting services to deliver JAR payloads that can gather system data, add Microsoft Defender exclusions, and steal information. #Weedhack…
Meta agreed to pay $17 billion and accept sweeping reforms after allegations that Facebook and Instagram were designed to be addictive and that the company mishandled children’s privacy under COPPA. The settlement imposes major teen-safety restrictions, independent oversight, and a ban on misleading claims about safety features, while California and other…
A cyberattack disrupted Boston Scientific’s business operations, impacting access to operating systems and applications needed to process and ship customer orders. The company has brought in a cybersecurity firm, but the full restoration timeline and financial impact remain unclear, while no threat group has claimed responsibility. #BostonScientific #SEC…
The NSA is hosting a first-ever reunion for former members of Tailored Access Operations (TAO) at Fort Meade as part of a push to rebrand the unit and recruit alumni back to service. The event highlights TAO’s secretive history, its role in operations like Stuxnet, and the agency’s unusual outreach efforts…
Federal authorities disclosed a long-running Chinese state-sponsored espionage campaign by QTFY that has targeted U.S. critical infrastructure and multiple federal agencies since 2018. The operation used a botnet, scanning tools, and exploited vulnerabilities in products from Ivanti, Fortinet, Citrix, Microsoft, F5, and others to infiltrate sensitive networks. #QTFY #QScan #QTRouter #Ivanti #PlugX
Cyber threats nudge Trump to sign executive order on foreign equipment in U.S. energy infrastructure
President Donald Trump signed an executive order declaring a national emergency to protect the U.S. bulk-power system from foreign-produced equipment, software, and systems that could create national security risks. The move targets concerns about Chinese-made components in energy infrastructure and directs the Energy Department to create implementation rules within 120 days. #DonaldTrump #WhiteHouse #China #EnergyDepartment