Why Europe’s Freezer Hacks Spread So Far, So Fast
Europe’s supermarket freezer hacks show how security issues can cascade across an industry, disrupting supply chains at scale.
-
-
Microsoft Paint RCE Fix Now Available, but Windows Update Won’t Deliver It
A fix for CVE-2026-83844, a remote code execution flaw in Windows Paint, is now in the Microsoft Store. Paint gets this fix only through a Store update, not through Windows updates. The fixed build, 11.2609.401.0, was the newest Paint build in all ten countries The Hacker News checked today. The flaw is an out-of-bounds read…
-
Malicious Browser Extensions Could Use Claude Dispatch to Run Code on Users’ Computers
A browser extension that can run scripts on claude.ai could make Claude Desktop run code on a person’s computer, researchers at Forever Security, an endpoint security company, showed in a test. The attack needs Dispatch, a Claude feature that lets people send tasks from their phone to Claude Desktop. The flaw that makes this possible…
-
The Flood is Coming And The Pipes Were Already Full
An update on Athena, and some unsolicited predictions on what’s coming next On Saturday, Dario Amodei published We Must Pace the Frontier. I agree with him. Go read it if you haven’t. I’ve spent the summer looking at what these models find, and the gap he describes between what they can do and what the…
-
UK Warns Its Critical Infrastructure Faces Grave Risk
Britain’s new Labour-led government is making a concerted push to get ahead of the AI risks to its national networks and the industrial complex.
-
Chainalysis Breach Exposes All Users’ Credentials, Forces Shutdown of Key Services
Blockchain analysis firm Chainalysis has revealed that its ongoing investigation into the agentic cyber attack targeting its systems also exposed names, usernames, password hashes and live tokens for all users. “While we investigated, we removed access to Reactor and Data Solutions,” the company said. “At this time we continue to have no evidence that any…
-
Hackers Hide Linux Backdoor in Control Web Panel Server to Execute Commands Without Logs
A backdoor has been found hiding in the web server that runs Control Web Panel (CWP), a free panel for managing Linux hosting servers, researchers at QiAnXin’s XLab said this week. The backdoored web server executes commands that attackers send via web requests, and those requests never appear in its access logs. Installing it takes…
-
Experts Demonstrate Barracuda Email Security Gateway Chain Enabling Root Access Without Login
Two flaws in Barracuda’s Email Security Gateway, an email-filtering appliance, can be chained to run commands on it as root, its highest level of access, with no login required. The company released patches on Monday, and the security firm watchTowr detailed the attack chain on Thursday. One flaw, CVE-2026-116606, is an authorization bypass. An unauthenticated…
-
US Government Email Systems Open to Abuse Thanks to Typos
Erroneous or outdated DNS records can give attackers surprising powers over organizations’ email systems.
-
What We Missed: Knicks Phishing Test Goes Out of Bounds
In this video conversation, Dark Reading editors discuss some of the news they didn’t get a chance to cover, from an ill-conceived phishing simulation to a hacktivist attack on a US government agency.