IoT Security
Hard-coded credentials found in widely deployed badge reader controllers
A maintenance account with a fixed password is reachable on the management network of thousands of buildings.
Security Architecture
Building systems that hold up under attack.
Application Security
Prototype pollution bugs still ship in one in five web apps, study finds
An analysis of 9,000 production bundles found outdated helper libraries are the main cause.
Cloud Security
Misconfigured storage buckets remain top cloud risk for third year
Public access settings and disabled logging account for most cloud findings in a new survey of 600 organisations.
Endpoint Security
Windows Print Spooler bug returns with a new escalation path
A crafted printer driver install grants SYSTEM privileges on fully patched Windows 11 machines.
Identity & Access
MFA fatigue attacks fall where number matching is enforced
Push bombing success rates dropped by 90 percent in tenants that require users to type a displayed code.
Mobile & Wireless
Banking trojans abuse Android accessibility services in new campaign
Fake utility apps request accessibility access, then read one-time codes and overlay bank login screens.
Network Security
HTTP/2 rapid reset variants still knocking over unpatched edges
Stream cancellation floods peaked at 212 Gbps last week, mostly against older reverse proxies.