ISC Patches 14 Vulnerabilities in BIND 9 Security Update

The Internet Systems Consortium (ISC) has released a critical security update for BIND, a widely used open-source DNS server software, to address 14 vulnerabilities that could lead to denial-of-service (DoS) attacks. These flaws, which include seven high-severity and seven medium-severity bugs, can be exploited using various techniques such as mismatched NOQNAME proof, QTYPE TKEY queries, … Read more

Comp AI Raises $34 Million for AI-Native Compliance and Security

A New Era in Compliance and Security: Comp AI Raises $34 Million for Agentic AI-Native Solutions In a significant development that underscores the growing importance of artificial intelligence (AI) in enterprise cybersecurity, Comp AI has secured $34 million in Series A funding to expand its governance, risk, and compliance (GRC) automation platform. The Florida-based startup’s … Read more

US takes down NightmareStresser DDoS-for-hire platform

The US Federal Bureau of Investigation (FBI) has dealt a significant blow to cybercrime by taking down NightmareStresser, one of the world’s longest-running DDoS-for-hire platforms. This development marks another major victory for international law enforcement agencies in their ongoing efforts to dismantle malicious online services. NightmareStresser was a platform that allowed anyone to rent large … Read more

Windows 11 24H2 Home and Pro reach end of support in October

In just over a month, devices running Windows 11 Home and Pro editions will no longer receive critical security updates, leaving users exposed to potential cyber threats. Microsoft has announced that support for these versions of its popular operating system will come to an end on October 13, marking a significant milestone in the company’s … Read more

Pixel Modem Zero-Day Exploited in Targeted Attacks

Google recently patched a zero-day vulnerability in Pixel phones that was exploited in targeted attacks. The flaw, tracked as CVE-2026-58704, affects the phone’s modem component and could lead to remote privilege escalation with no additional execution privileges needed. The vulnerability has been rated high severity by Google, which is aware of “limited, targeted exploitation”. This … Read more

AIUC Raises $40 Million to Certify Enterprise AI Agents

A New Standard for Enterprise AI Agents: $40 Million Funding Boosts Certifying Company AIUC Artificial Intelligence Underwriting Company (AIUC), a San Francisco-based startup, has secured a significant $40 million investment in its Series A funding round. This brings the total amount raised by the company to $55 million. The fresh funds will be used to … Read more

Microsoft shares workaround for Windows domain login issues

Windows Domain Login Issues Widespread After Latest Security Updates A major issue has emerged for Windows 11 users who installed the latest security updates in September. Many are finding themselves unable to log in with valid domain credentials, leading to frustration and disruption for organizations worldwide. The problem stems from a security mechanism called Machine … Read more

Chinese hackers use SparroWocky malware in govt espionage attacks

Chinese Hackers Use Sophisticated Malware in Government Espionage Attacks A China-linked espionage group has been using a new, highly advanced malware to target government organizations in Latin America. The malware, known as SparroWocky, was identified by ESET researchers who tracked its use in attacks on at least nine countries in the region. The targets of … Read more

US takes down NightmareStresser DDoS-for-hire platform

The US Federal Bureau of Investigation (FBI) has taken down NightmareStresser, one of the world’s most notorious distributed denial-of-service (DDoS) platforms. This move is part of a coordinated effort by international law enforcement agencies to dismantle DDoS-for-hire services worldwide. For years, NightmareStresser allowed anyone to rent botnets of compromised devices and launch massive DDoS attacks … Read more