Grab a blazing-fast dual-interface M.2 SSD enclosure for just $59 on Amazon — Asus' tool-less ROG Strix Aio…

Asus' fancy dual-interface M.2 enclosure is marked down to its lowest price ever on Amazon right now. Not only is it fast, but it also looks clean and has extra on-the-go convenience thanks to its metal hook and strap.

https://www.tomshardware.com/pc-components/grab-a-blazing-fast-dual-interface-m-2-ssd-enclosure-for-just-usd59-on-amazon-asus-tool-less-rog-strix-aiolos-is-14-percent-off-right-now-featuring-transfer-speeds-up-to-20-gbps

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxps[:]//barclays-banking[.]net/landing/form/2638b639-b84b-4009-88f5-487e56a74a96
🧬 Analysis at: https://urldna.io/scan/6a5343373b77500003aaa3d6
#cybersecurity #phishing #infosec #urldna #scam #infosec

#Australia warns of global campaign targeting vulnerable CMS platforms

https://www.bleepingcomputer.com/news/security/australia-warns-of-global-campaign-targeting-vulnerable-cms-platforms/

#cybersecurity

Der CCC hat schwerwiegende Sicherheitslücken in Hoymiles-Wechselrichtern (Balkonkraftwerke, kleine PV-Anlagen) veröffentlicht. Die Geräte kommunizieren unverschlüsselt per Funk. Fernsteuerung, Firmware-Manipulation und physische Zerstörung sind ohne Authentifizierung möglich. Hoymiles hat keinen Patch geliefert. #CCC #IoT #Cybersecurity #Solarenergie #Hoymiles #ITSecurity #Energiewende #PVAnlagen

#chrome extension Wasabi Green seems malicious. Its #cybersecurity badness score is 86/100!

```json
{"id": "cmmmdabkpngbahdopboaojncapjkifhp", "score": 86, "platform": "chrome", "name": "Wasabi Green"}
```

#chrome extension StreamTube Proxy seems malicious. Its #cybersecurity badness score is 86/100!

```json
{"id": "epkcfhiniijndongcpclcfogmbpphfga", "score": 86, "platform": "chrome", "name": "StreamTube Proxy"}
```

ISO 9001 is the internationally recognized standard for Quality Management Systems (QMS). It provides a framework for organizations to ensure they consistently deliver products and services that meet customer and regulatory requirements while driving continual improvement.

#cybersecurity #governance #risk #technology #gaming #programming #ai #business #engineering

Link: https://blackcatwhitehatsecurity.com

Alt...

ISO 9001 is the internationally recognized standard for Quality Management Systems (QMS). It provides a framework for organizations to ensure they consistently deliver products and services that meet customer and regulatory requirements while driving continual improvement.

How Philips Hue got the smart home right

A photo of a lightbulb glowing purple. | Photo: Amelia Holowaty Krales / The Verge The state of the smart home can be frustrating, because it is just so obvious how things ought to work. You should be able to control ev…

https://www.theverge.com/podcast/964515/philips-hue-smart-lights-version-history

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

Sega Dreamcast driver fixes appear in Linux 7.2-rc3 — fabled console remains in favor while iconic computing architectures like i486 fall by the wayside

A set of updates for Sega Dreamcast hardware has been merged into the Linux 7.2-rc3 kernel this weekend.

https://www.tomshardware.com/software/linux/sega-dreamcast-driver-fixes-appear-in-linux-7-2-rc3-fabled-console-remains-in-favor-while-iconic-computing-architectures-like-i486-fall-by-the-wayside

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TomsHardware [Tom's Hardware]

Possible Phishing 🎣
on: ⚠️hxxp[:]//c9e059a1[.]73634c9b2b1a997bd44876e7[.]workers[.]dev/
🧬 Analysis at: https://urldna.io/scan/6a5327263b775000078c9bf1
#cybersecurity #phishing #infosec #urldna #scam #infosec

🔴 CVE-2026-56688 - Critical (9.1)

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability. A high privileged attacker with remote access could potentially exploit this ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56688/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56688

🟠 CVE-2026-56689 - High (7.7)

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56689/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56689

🟠 CVE-2026-56690 - High (8.5)

Dell PowerFlex Manager, Version prior to 5.1.0.1, contain(s) an Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability. A low privileged attacker with remote access could potentially exploit this vulnera...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56690/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56690

RedHook RAT: Android Malware Gains Shell Access Without Root or PC https://deafnews.it/en/article/redhook-rat-android-malware-gains-shell-access-without-root-or-pc #Cybersecurity

One of SteelSeries’ best gaming headsets is over $100 off

The SteelSeries Arctis Nova Pro gaming headset. | Photo by Amelia Holowaty Krales SteelSeries has the Arctis Nova Pro Wireless gaming headset on sale for $239.99 (currently between $300 and $350 at other retailers). The…

https://www.theverge.com/gadgets/964125/steelseries-arctis-nova-pro-wireless-headset-deal-sale

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #TheVerge [The Verge]

🟠 CVE-2026-15483 - High (8.8)

A security vulnerability has been detected in TRENDnet TEW-821DAP 1.12B01. Impacted is the function sub_41EC14 of the file /goform/tools_nslookup of the component ssi. The manipulation of the argument nslookup_target leads to buffer overflow. It i...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-15483/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-15483

The infrastructure behind scams #negativepid #digitalInvestigations #OSINT #cybersecurity #AI #tech #onlineInvestigations #robotics #cyberpsychology #cybercrime https://negativepid.blog/the-infrastructure-behind-scams/?utm_source=mastodon&utm_medium=social&utm_campaign=fedica-Negative-PID-Blog

🎣 Phishing Spotlight

www[.]facebookphotospage[.]blogspot[.]com

🌐 Stack: GSE

🔗 https://beesint.com/pulse/6d7f0b31-3bda-4b37-bec1-92b593f307ec

#OSINT #Phishing #ThreatIntel #CyberSecurity

Everyone talks about end-to-end encryption, but that's only one piece of the privacy puzzle.

I compared 14 messaging apps using the LINDDUN privacy threat modeling framework, evaluating them across seven privacy threats:

• Linkability
• Identifiability
• Non-repudiation
• Detectability
• Data disclosure
• Unawareness
• Non-compliance

The results challenge many common assumptions about apps like WhatsApp, Telegram, Signal, iMessage, Discord, Threema, Session, SimpleX, Briar, Cwtch, Matrix, Wire, and others.

If you care about metadata, anonymity, surveillance resistance, or privacy by design, this guide is for you.

🔗 https://thecybersecguru.com/online-privacy/most-secure-messaging-apps-2026/

#Privacy #CyberSecurity #Infosec #Encryption #Signal #SimpleX #Briar #Threema #Messaging #OpenSource #LINDDUN #DigitalPrivacy

Ashlar-Vellum: 97 CVEs, 93 critical/high, avg CVSS 7.8. 100% unpatched. Trust Score: D. Top weakness: CWE-787 (buffer overflow). CAD tools, serious risk. #AshlarVellum #cybersecurity #infosec

https://www.valtersit.com/vendors/ashlar-vellum/

I couldn’t have been more wrong about the Fitbit Air — here’s what changed my mind

After three weeks with the Fitbit Air, I'm seriously questioning whether I still need my WHOOP subscription.

https://www.androidauthority.com/i-couldnt-have-been-more-wrong-about-the-fitbit-air-3685038/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

The TCL NXTPAPER 11 Plus is a budget Android tablet that finally does something different

This budget slate has got more personality than any $250 tablet has a right to.

https://www.androidauthority.com/tcl-nxtpaper-11-plus-review-3681246/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

Security Tip: Audit your transitive dependencies. 🛡️ It’s not enough to monitor the libraries you directly import. Vulnerabilities often hide deep within the dependency tree. Use automated auditing tools in your CI/CD pipeline to flag known CVEs in the entire stack. Reducing your dependency bloat is a key step in hardening your application. Stay updated on the latest threats: https://cvedatabase.com #CyberSecurity #InfoSec #AppSec #CVE

Possible Phishing 🎣
on: ⚠️hxxps[:]//nidnaver12155667gf[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a52fce63b77500009eb9eaf
#cybersecurity #phishing #infosec #urldna #scam #infosec

3 reasons why I want to ditch Google, and 3 reasons why I can’t

As much as I rage against Google services, the company also has me in a chokehold.

https://www.androidauthority.com/reasons-to-ditch-google-but-why-i-cant-3684072/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

When is Apple releasing new AirPods?

Apple’s AirPods lineup is stronger than ever, but there are already rumors about what’s coming next. Here’s everything we know so far about when Apple will release new AirPods.

https://9to5mac.com/2026/07/08/when-is-apple-releasing-new-airpods/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

🟠 CVE-2026-56305 - High (8.3)

Capgo before 12.128.2 contains an authentication bypass vulnerability in the password change endpoint that allows attackers to change user passwords without requiring current password confirmation. Attackers with temporary session access can explo...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-56305/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-56305

🚨 EUVD-2026-43213

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: TOKO-ONLINE-ROTI
🏢 Vendor: RafyMrX
📅 Updated: 2026-07-12

📝 A weakness has been identified in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. This affects an unknown part. This manipulation causes missing authentication. The attack is possible to be carried out remotely. This product...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43213

#cybersecurity #infosec #euvd #cve #vulnerability

🚨 EUVD-2026-43212

📊 Score: 6.9/10 (CVSS v3.1)
📦 Product: TOKO-ONLINE-ROTI
🏢 Vendor: RafyMrX
📅 Updated: 2026-07-12

📝 A security flaw has been discovered in RafyMrX TOKO-ONLINE-ROTI up to ddfe1cd587be0a0b5135d8b6e85cce2ec3aece99. Affected by this issue is some unknown functionality of the file proses/add.php. The manipulation of the argument kode_produk/kd_cs resul...

🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-43212

#cybersecurity #infosec #euvd #cve #vulnerability

Possible Phishing 🎣
on: ⚠️hxxps[:]//ssos-ehess[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a52c4ae3b77500009eb99a1
#cybersecurity #phishing #infosec #urldna #scam #infosec

🟠 CVE-2026-29519 - High (8.2)

Lucee CFML Server versions across the 5.3.x, 6.1.x, 6.2.x, and 7.0.x release lines contain a reflected cross-site scripting vulnerability in URL path parsing that allows unauthenticated remote attackers to execute arbitrary JavaScript in a victim'...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-29519/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-29519

🟠 CVE-2026-38057 - High (8.1)

The iDirect iQ200 does not validate CSRF tokens on state-changing API endpoints after authentication. The /api/reboot endpoint accepts POST requests authenticated solely by a session cookie that lacks the SameSite attribute. A remote attacker can ...

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-38057/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-38057

CISA and JoomliC Report Critical iCagenda Zero-Day Exploited in the Wild

JoomliC fixed a critical remote code execution vulnerability in the iCagenda Joomla extension that attackers are actively using to compromise servers. The flaw allows unauthenticated file uploads on Joomla 6 sites and unauthorized event submissions across all versions.

**If your Joomla site uses the iCagenda extension (versions 3.2.1–3.9.14 or 4.x up to 4.0.7), update immediately to 4.0.8 or 3.9.15. Simply unpublishing or hiding the component will NOT protect you, since attackers are actively exploiting it without needing to log in. After updating, check the `images/icagenda/frontend/attachments/` folder for suspicious PHP files. If you find any, your site was likely already compromised and needs a full cleanup.**
#cybersecurity #infosec #attack #activeexploit
https://beyondmachines.net/event_details/cisa-and-joomlic-report-critical-icagenda-zero-day-exploited-in-the-wild-q-c-t-t-l/gD2P6Ple2L

Stop giving away your email address — use these 5 email alias services instead

A simple privacy upgrade to protect your personal email.

https://www.androidauthority.com/best-email-alias-services-2026-3685703/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #AndroidAuthority [Android Authority]

🖲️ #Cybersecurity #Ciberseguridad #Ciberseguranca #Security #Seguridad #Seguranca #News #Noticia #Noticias #Tecnologia #Technology
⚫ European Organizations Have a Collaboration Security Confidence Gap
🔗 https://www.darkreading.com/cybersecurity-operations/european-organizations-collaboration-security-confidence-gap

A new survey shows security leaders have an inflated sense of safety regarding their collaboration tools and platforms.

🟠 CVE-2026-59793 - High (8.8)

In JetBrains TeamCity before 2026.1.2 arbitrary file access was possible via the Perforce VCS integration

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59793/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-59793

🟠 CVE-2026-59795 - High (8.1)

In JetBrains TeamCity before 2026.1.2 stored XSS via unauthenticated agent registration was possible

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59795/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-59795

🟠 CVE-2026-59796 - High (8.1)

In JetBrains TeamCity before 2026.1.2 pipeline modification was possible due to improper permission checks

🔗 https://www.thehackerwire.com/vulnerability/CVE-2026-59796/

#CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack

Alt...

CVE Alert: CVE-2026-59796

A decade of rent, wrapped

Ten years of Spotify is $1,560. Netflix $2,400. Google One $1,000. The self-hosted decade costs $0 — and you end it owning everything. Count-up numbers you can feel.

Directory: https://selfhost.directory

#Opensource #Homelab #Tech #Techtok #Cybersecurity #Privacy