Computer Security Articles – RSS Reader for Computer Security Articles

The cybercrime groupQilinhas emerged as the world’s most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade that all point to a 36-year-old man living in St. Petersburg, Russia.Operating since September 2022, the Russia-based ransomware group Qilin is the currently the most industrious ransomw

Krebs

November 11, 2026 admin

Microsoft Fixes Nearly 1,100 Security Vulnerabilities

Microsoftdid another four-digit patch drop today, releasing updates to fix almost 1,100 security vulnerabilities in itsWindowsoperating systems and supported software. This month’s Patch Tuesday addresses 63 critical flaws — including a zero-day inMicrosoft Outlook— and comes amid important security updates from other software makers, includingAdobe,Apple,GoogleandMozilla.Image: Shutterstock.com. Diorama by @zepp1969.November’s patch release from Redmond tackles 1,093 vulnerabilities, fixing 63

ReversingLabs

November 10, 2026 admin

The AI Cyberattack Surge Hasn’t Arrived. But the Warning Signs Are Growing.

The predicted wave of autonomous, AI-driven cyberattacks has not yet shown up as a clearly measurable surge in cyber losses. But that is not the same as saying attackers are standing still.In an October 24 search of the ReversingLabs malicious-file corpus, we found a growing number of files containing references to large language model (LLM) APIs. Our estimated high-confidence subset increased from roughly150 files in 2024to620 in 2025and1,680 from January 1 through October 24, 2026. These are e

Krebs

November 5, 2026 admin

Want to Rent an Internet Address at the White House?

Several staffers at the White House are using computers or mobile devices equipped with residential proxy services that render their internet address available for others to rent, security experts warned today. One of the proxy services is a Russian company whose founder’s web hosting business was ground zero for cyberattacks against election systems in Arizona and Illinois in 2016.The security firmLayer3 Intelsaid it detected multiple residential proxy nodes beaconing out from the internet addr

ReversingLabs

November 4, 2026 admin

Binance heist: what we know, and what RL sees in TraderTraitor’s toolkit

Updated November 4, 2026On October 29, 2026, attackers stole approximately $6.34 billion in digital assets from Binance in one of the largest cryptocurrency thefts on record. Since our initial analysis, two significant developments have clarified how the attack unfolded.On October 31, the FBI formally attributed the theft to North Korea’s TraderTraitor operation. On November 3, Binance released its initial incident findings, revealing a multi-stage compromise involving malicious software deliver

Krebs

November 3, 2026 admin

Tech Firms Dismantle Botnet That Turned 1.3M TV Boxes Into Proxies

Googlesaid today it worked with industry partners to dismantle a botnet made up of more than 1.3 millionAndroidTV set-top boxes that ship with malicious software which secretly rents the user’s Internet connection out to strangers and conducts advertising fraud. Experts involved in the takedown say the action is likely to sever the botnet’s access to more than 10 million additional compromised systems, including other Internet of Things (IoT) products such as Android-based healthcare devices and

ReversingLabs

November 2, 2026 admin

The Sky Is Falling (Again): What PHP2Shell Says About AI, The Disclosure Process, and Security

SummaryLast week, PHP imploded, following the disclosure of the PHP2Shell vulnerabilities, CVE-2026-109618 and CVE-2026-109619.Researchers leveraging AI tools discovered that some dormant vulnerabilities in PHP could be chained together into a functional exploit, which introduced PHP2Shell to the world. This exploit could allow attackers to compromise any sites that use PHP. A fix was rolled out, and chaos ensued. This story echoes what happened earlier this year, with CVE-2026-31431. Also known

ReversingLabs

October 29, 2026 admin

Threat Researcher’s Notebook: How Attackers Redirect Crypto Payments

SummaryCryptocurrency is being used every day to facilitate a variety of transactions. It’s unlike the usual banking systems, having its own unique strengths and weaknesses. Attackers have made specialized malware to redirect normal transactions to wallets they control in order to steal money, referred to as “Clipbankers”. Due to the nature of cryptocurrency, these transactions are irreversible. ReversingLabs investigated two malware families of this nature, digging into how they work. This blog