Benn Jordan, Musician, Scientist, and YouTuber on Flock Safety Cameras, Privacy & Surveillance
This week in cybersecurity from the editors at Cybercrime Magazine
An Actionable Guide to GDPR Compliance for Startups | CSA
A practical, step-by-step GDPR compliance guide for startups, covering roles, data mapping, lawful bases, and ongoing data protection practices.
EtherRAT Distribution Spoofing Administrative Tools via GitHub Facades
44 GitHub facades and Ethereum smart contracts power a March 2026 admin-targeted campaign, enabling resilient C2 rotation and enterprise compromise.
New Python Backdoor Uses Tunneling Service to Steal Browser and Cloud Credentials
DEEP#DOOR embeds a Python RAT in a dropper script, using bore[.]pub C2 to steal credentials and evade Windows defenses, complicating detection.
Critical cPanel and WHM bug exploited as a zero-day, PoC now available
The critical CVE-2026-41940 authentication bypass vulnerability in cPanel, WHM, and WP Squared is being actively exploited in the wild and has been leveraged in attempts since late February.
Police dismantles 9 crypto scam centers, arrests 276 suspects
A joint international operation involving U.S. and Chinese authorities arrested at least 276 suspects and shut down nine cryptocurrency investment fraud centers.
Fast16 Malware - Schneier on Security
Researchers have reverse-engineered a piece of malware named Fast16. It’s almost certainly state-sponsored, probably US in origin, and was deployed against Iran years before Stuxnet: “…the Fast16 malware was designed to carry out the most subtle form of sabotage ever seen in an in-the-wild malware tool: By automatically spreading across networks and then silently manipulating computation processes in certain software applications that perform high-precision mathematical calculations and simulate physical phenomena, Fast16 can alter the results of those programs to cause failures that range from faulty research results to catastrophic damage to real-world equipment.”...
Everyone’s building AI agents. Almost nobody’s ready for what they do to identity. | CyberScoop
Anthropic’s decision to pull Mythos exposes a critical flaw: our security systems still assume a human is behind the keyboard. As autonomous AI agents scale, we must move beyond passwords to verify every actor—human or machine.
Python-Multipart 0.0.22 - Path Traversal
Python-Multipart 0.0.22 - Path Traversal. CVE-2026-24486 . webapps exploit for Python platform
FUXA 1.2.8 - Authentication Bypass + RCE Exploit
FUXA 1.2.8 - Authentication Bypass + RCE Exploit. CVE-2025-69985 . webapps exploit for Multiple platform
Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap
Google Chrome 145.0.7632.75 - CSSFontFeatureValuesMap. CVE-2026-2441 . local exploit for Multiple platform
Windows 11 23H2 - Denial of Service (DoS)
Windows 11 23H2 - Denial of Service (DoS). CVE-2025-47987 . local exploit for Windows platform
Repetier-Server 1.4.10 - Path Traversal
Repetier-Server 1.4.10 - Path Traversal. CVE-2026-26335 . webapps exploit for Multiple platform
Vulnérabilité Copy Fail : tout savoir sur la faille qui touche le noyau Linux - Numerama
Une vulnérabilité découverte par des chercheurs en sécurité permet à n'importe quel utilisateur local de prendre le contrôle total d'un système Linux, sur la quasi-totalité des distributions existantes. L'exploit tient en 732 octets de Python. Il existe des failles que l'on remarque une fois qu'elles ont été
HUSTOJ Zip-Slip v26.01.24 - RCE
HUSTOJ Zip-Slip v26.01.24 - RCE. CVE-2026-24479 . webapps exploit for Multiple platform
Meta accused of violating DSA by failing to safeguard minors
The European Commission accuses Meta of failing to protect children, allowing users under 13 on Instagram and Facebook.
New Linux 'Copy Fail' Vulnerability Enables Root Access on Major Distributions
CVE-2026-31431 CVSS 7.8 flaw since 2017 enables root via 732-byte exploit, impacting major Linux distributions.
Windows 11 25H2 - Heap Overflow
Windows 11 25H2 - Heap Overflow. CVE-2026-21248CVE-2026-21244 . local exploit for Windows platform
BusyBox 1.37.0 - Path Traversal
BusyBox 1.37.0 - Path Traversal. CVE-2026-26157 . webapps exploit for Multiple platform
JUNG Smart Visu Server 1.1.1050 - Dos
JUNG Smart Visu Server 1.1.1050 - Dos. CVE-2026-26235 . webapps exploit for Multiple platform
SumatraPDF 3.5.2 - Remote Code Execution
SumatraPDF 3.5.2 - Remote Code Execution. CVE-2026-25961 . webapps exploit for Multiple platform
NiceGUI 3.6.1 - Path Traversal
NiceGUI 3.6.1 - Path Traversal. CVE-2026-25732 . webapps exploit for Multiple platform
Js2Py 0.74 - RCE
Js2Py 0.74 - RCE. CVE-2024-28397 . webapps exploit for Multiple platform
Frigate NVR 0.16.3 - Remote Code Execution
Frigate NVR 0.16.3 - Remote Code Execution. CVE-2026-25643 . webapps exploit for Multiple platform
Large-scale Roblox hacking operation shut down by Ukrainian authorities
Ukrainian police arrested three hackers who hijacked 610,000 Roblox accounts and sold them for $225,000 in profit.
Silver Fox uses the new ABCDoor backdoor to target organizations in Russia and India
The Silver Fox group is targeting companies in Russia and India by impersonating tax authorities to distribute ValleyRAT and the new ABCDoor backdoor.
Camaleon CMS v2.9.0 - Path Traversal
Camaleon CMS v2.9.0 - Path Traversal. CVE-2024-46987 . webapps exploit for Multiple platform
Erugo 0.2.14 - Remote Code Execution (RCE)
Erugo 0.2.14 - Remote Code Execution (RCE). CVE-2026-24897 . webapps exploit for Multiple platform
deephas 1.0.7 - Prototype Pollution
deephas 1.0.7 - Prototype Pollution. CVE-2026-25047 . webapps exploit for Multiple platform
SUSE Manager 4.3.15 - Code Execution
SUSE Manager 4.3.15 - Code Execution. CVE-2025-46811 . webapps exploit for Multiple platform