23-Year-Old Sality P2P Botnet Disrupted
The shutdown operation involved peer list manipulation and Sality payload URL takedown. The post 23-Year-Old Sality P2P Botnet Disrupted appeared first on SecurityWeek.
Author:
How to Run a Vulnerability Scan: 12 Steps, 90 Min [2026]
The National Vulnerability Database entered September 2026 carrying more than 27,000 unprocessed CVEs, a backlog that grew from roughly 13,000 in mid-2024, according to a June 2026 inspector general report from the US Commerce Department. In April 2026, NIST reclassified close to 29,000 of those backlogged entries as “Not Scheduled,” meaning they get no automatic…
Games Industry Reset: 14,666 Layoffs Forecast [2026]
The video game industry is in the middle of what GamesIndustry.biz has taken to calling “the reset”, a multi-year stretch of layoffs, studio closures and funding contraction that, four years in, still isn’t slowing down. New tracking data published this week shows just how much worse 2026 has gotten than anyone forecast at the start…
Microsoft is enabling a Windows 11 security feature that can hurt gaming performance
Microsoft is getting ready to roll out its memory integrity security feature of Windows 11 to more devices next month. The kernel-level protection feature is designed to stop malicious code or drivers running on a Windows 11 machine, but Microsoft previously warned it can also impact PC gaming performance. “Windows quality updates will begin enabling…
Authorities Turn Sality's P2P Network Against Itself, Cutting Off New Malware Payloads
The U.S. Department of Justice (DoJ) on Tuesday announced the takedown of a long-standing peer-to-peer (P2P) botnet known as Sality as part of a coordinated law enforcement operation. The effort was undertaken on August 31, 2026, by authorities from the U.S., Bulgaria, Hungary, and Romania, in collaboration with private industry partners CrowdStrike and the Shadowserver…
Attackers Exploit Critical Switchvox Flaw to Deploy Reverse Shells Without Credentials
Threat actors are exploiting a severe security vulnerability in Sangoma Switchvox, an enterprise VoIP platform, that could allow unauthenticated remote code execution. The vulnerability in question is CVE-2026-9586 (CVSS score: 9.3), a critical unauthenticated SQL injection vulnerability in Sangoma Switchvox SMB Edition 8.3 (104997) that can allow attackers to remotely execute arbitrary code as
Researchers Use Claude to Port Pre-Auth RCE Exploit From One PLC Model to Another
Forescout Research – Vedere Labs said it used Anthropic’s Claude to port a working pre-authentication remote code execution (RCE) exploit from one WAGO programmable logic controller (PLC) to another, executing attacker-supplied ARM shellcode on live hardware. The exploit targets CVE-2021-31886, a stack-based buffer overflow in the Nucleus FTP server’s handling of the USER command
Dell’s newest laptop sounds a lot like a MacBook Neo
Dell’s new Dell 14S laptop sounds a lot like a MacBook Neo: it comes in four colors, is aimed at students, and it starts with 8GB of RAM and 256GB of storage. Announced at IFA 2026, the 14S is meant to sit below the recently launched XPS 13 and offer another affordable laptop option as…
eBay Coupons: 20% Off in September 2026
Save up to 60% on a selection of items at eBay, including electronics, home products, card games, car parts and more.
Azahar vs Citra vs Lime3DS: 3DS Emulation After the $2.4M Shutdown [2026]
Nintendo 3DS emulation on PC looks nothing like it did two years ago. Citra, the emulator that defined the category for a decade, went dark on March 5, 2024, after Nintendo’s parent company Tropic Haze settled a lawsuit tied to the Yuzu Switch emulator for $2.4 million. That settlement didn’t just kill Yuzu — it…