MAX Audit Finds Server Controls That Differ Between Accounts
InterSecLab traced per-account settings, VPN blocking and contact uploads in MAX for Android. The audit separates observed behavior from dormant code.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 24, 2026
Latest reports
HeyCyan Smart Glasses Test Exposes an Open Photo Album
Check the app, firmware and access controls before trusting smart glasses with private recordings. Encryption and owner approval are separate safeguards.
Macfinger Turns Real Websites Into Fake Mac Verification Traps
SANS tracks Macfinger ClickFix on compromised websites. Learn why a fake browser check is different from running its command on your Mac.
CLOSEDQUORUM: Windows Malware Puts Its Next Move to a Vote
Talos found a Windows implant designed to take votes from four AI providers. The public sample is inert, and real attacks remain unconfirmed.
Fake Drawing Votes Target Telegram Accounts, Ukraine Warns
A fake drawing contest turns a vote into a Telegram login. Ukraine renewed the warning; check unfamiliar sessions if you entered a code.
AWS Quarantined a Leaked Key in 10 Seconds. The Response Wasn’t Over.
Unit 42 measured AWS quarantining a public GitHub key leak in 10 seconds. See what the policy limits, which log signal matters, and why…
Talking Tilly: The Camera Keeps Analysing After the Age Check
Talking Tilly requires an age selfie, analyses mood during calls and keeps different records on separate clocks. Here is what the service discloses.
Fake AI Subscription Sites Use Real Google Sign-In
Researchers linked over 100 subscription sites using genuine Google login. Learn why authentication does not verify the seller or cancel a purchase.
PAYLOAD Turns Windows Group Policy Into a Ransom Demand
PAYLOAD attackers used domain policy to display ransom notes without encrypting Windows files. The investigation explains why endpoint cleanup is not enough.