The Edge of the Cyber World See the latest
The seizures of the tools, allegedly operated by the Chinese firm Integrity Tech, accompanied a warning from the FBI, CISA and NSA. The post DOJ, FBI seize Flax Typhoon-linked hacking tools Microscan, FishHub appeared first on CyberScoop.
Stick drift used to be the cost of doing business with a gamepad. Three to six months of hard use and the left stick would start pulling toward a corner on its own, usually right in the middle of a ranked match. That complaint eventually turned into lawsuits against Nintendo and Microsoft over Joy-Con and…
South Korea’s cyberattack investigation into the country’s megachurches widened dramatically this week after a second Seoul congregation, Sarang Community Church, confirmed that member records had been stolen, just days after Yoido Full Gospel Church disclosed a breach now estimated to touch as many as 960,000 people. President Lee Jae Myung has ordered government agencies to…
Two of South Korea’s largest churches are investigating suspected cyberattacks that may have exposed personal data belonging to hundreds of thousands of congregants, with early technical signs pointing to attacker activity automated by artificial intelligence. Yoido Full Gospel Church in Seoul, described in multiple reports as the country’s largest registered congregation, said on October 7,…
A new security audit has found that roughly one in eight credential slots inside publicly posted Model Context Protocol (MCP) configuration files on GitHub contain a hardcoded secret, and nearly a quarter of those secrets never expire and carry broad access rights. The research, published by Hush Security on October 8, 2026, scanned approximately 82,000…
The Entertainment Software Association of Canada is on a clock. Paul Fogolin, the trade group’s president and CEO, has told Console Creatures that “before 2026 ends, the organization, which represents and promotes the gaming industry across the country and internationally, will change its name to Video Games Canada.” That puts a hard deadline on a…
Searches for “cursor hooks” have climbed steadily through 2026 as more engineering teams push Cursor past the solo-developer stage into shared, policy-governed environments. The feature itself is straightforward: a hook is a shell command that Cursor’s agent runs at a defined point in its loop, before a prompt goes out, before a shell command executes,…
Advisory at a Glance Title Chinese Government-linked Cyber Threat Actors Combine Automated and Hands-on Hacking Tools to Steal Sensitive Data Original Publication October 8, 2026 Executive Summary Chinese government-linked cyber threat actors, enabled by the Integrity Technology Group, are combining automated scanning tools, large-scale botnets, and hands-on exploitation techniques to target and steal sensitive data…
View CSAF Summary Successful exploitation of these vulnerabilities could allow a malicious user to access the device and gain administrative access. This access would allow the user to view, edit, and upload configuration files. Further, a malicious user can cause the switch to reboot by navigating to a specific URL on the device. This action…
View CSAF Summary The following versions of Grid Protection Alliance openPDC and openHistorian are affected: openPDC <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022) openPDC (Docker image) <2.9.477, <2.9.482 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022, CVE-2026-105278) openHistorian <2.8.580, <2.8.585 (CVE-2026-104629, CVE-2026-100730, CVE-2026-105281, CVE-2026-85479, CVE-2026-101022) CVSS Vendor Equipment v3 9.8 Grid Protection Alliance openPDC 5 Vulnerabilities Deserialization of…
