Tech news

Security technology news

Headlines from leading security publications and research teams, refreshed automatically. Choose a category to narrow them.

Updated automatically every 6 hours. Last update 2 Nov 2026, 11:34 IST · 13 sources · Get these by email

AI security One does not simply defend agenticallyDefenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence. UK NCSC · United Kingdom · 21 Sep 2026
Vulnerabilities & exploits Windows Exploitation Techniques: Dangling COM Object RegistrationsThis short blog post is about abusing a privilege escalation bug that Microsoft recently fixed in Windows, CVE-2026-66804, that I and 14 others reported. This issue is an incomplete fix for CVE-2026-50343, a bug dubbed “Dark Elevator” by Calif. The root cause of the bug was a dangling COM object… Google Project Zero · Global · 21 Sep 2026
Threats, ransomware & breaches Adversary simulation: what you need to knowAdversary simulation ('red teaming') tests your ability to prevent, detect and respond to cyber attacks. UK NCSC · United Kingdom · 17 Sep 2026
Policy, regulation & law enforcement Cyber Adversary Simulation (CyAS): scheme documents now availableOur view of good cyber adversary simulation – and how assured providers can deliver it. UK NCSC · United Kingdom · 17 Sep 2026
Threats, ransomware & breaches Data Broker Radaris Loses Domains in Privacy FightThe consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that… Krebs on Security · Global · 16 Sep 2026
Threats, ransomware & breaches UK and allies expose spyware used by Iranian state actors to target dissidents, activists and journalistsUK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware. UK NCSC · United Kingdom · 15 Sep 2026
Threats, ransomware & breaches Iranian cyber targeting of dissidents, activists and journalistsAdvisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves. UK NCSC · United Kingdom · 15 Sep 2026
AI security Microsoft Plugs Nearly 1,000 Security HolesMicrosoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many… Krebs on Security · Global · 8 Sep 2026
Vulnerabilities & exploits Testing race conditions with memory access tracing and stack-based delay injectionMany security bugs are race conditions, where multi-threaded execution has to occur with the right interleaving for a negative effect to appear. This creates challenges for several use cases: Confirming bug candidates that have been discovered manually or through static analysis. Regression tests:… Google Project Zero · Global · 8 Sep 2026
AI security The hidden risks of shadow AIUnderstanding why staff use unapproved AI tools is key to managing the security challenges they can create. UK NCSC · United Kingdom · 7 Sep 2026
OT, ICS & IoT Disruptive cyber activity highlights risk from internet-exposed systems and edge devicesOwners of operational technology encouraged to address avoidable vulnerabilities, and build long-term cyber resilience. UK NCSC · United Kingdom · 27 Aug 2026
AI security Managing the cyber risk of agentic AIUse safeguards, sandboxing and active oversight to realise the benefits of autonomous systems while limiting the unintended activity. UK NCSC · United Kingdom · 20 Aug 2026
Vulnerabilities & exploits How BitLocker PINs help protect your data and devicesUsing a PIN mitigates many BitLocker vulnerabilities. Make sure you’re ready for the next one... UK NCSC · United Kingdom · 13 Aug 2026
Policy, regulation & law enforcement Help shape the future of resilient private 5GThe NCSC wants to collaborate with organisations developing technologies and approaches for secure, resilient and deployable private 5G UK NCSC · United Kingdom · 12 Aug 2026
OT, ICS & IoT Water sector example added to the NCSC’s Secure connectivity principlesNew guidance is the first content authored by the Industrial Control System COI to appear on ncsc.gov.uk. UK NCSC · United Kingdom · 11 Aug 2026
Vulnerabilities & exploits A 0-click exploit chain for the Pixel 10: When a Door Closes, a Window OpensWe recently published an exploit chain for the Google Pixel 9 that demonstrated it was possible to go from a zero-click context to root on Android in just two exploits. The Dolby 0-click vulnerability existed across all of Android, until it was patched in January 2026. While we had an exploit… Google Project Zero · Global · 13 May 2026
Vulnerabilities & exploits On the Effectiveness of Mutational Grammar FuzzingMutational grammar fuzzing is a fuzzing technique in which the fuzzer uses a predefined grammar that describes the structure of the samples. When a sample gets mutated, the mutations happen in such a way that any resulting samples still adhere to the grammar rules, thus the structure of the… Google Project Zero · Global · 5 Mar 2026
Applications & supply chain A Deep Dive into the GetProcessHandleFromHwnd APIIn my previous blog post I mentioned the GetProcessHandleFromHwnd API. This was an API I didn’t know existed until I found a publicly disclosed UAC bypass using the Quick Assist UI Access application. This API looked interesting so I thought I should take a closer look. I typically start by… Google Project Zero · Global · 26 Feb 2026
Operating systems & software Bypassing Administrator Protection by Abusing UI AccessIn my last blog post I introduced the new Windows feature, Administrator Protection and how it aimed to create a secure boundary for UAC where one didn’t exist. I described one of the ways I was able to bypass the feature before it was released. In total I found 9 bypasses during my research that… Google Project Zero · Global · 12 Feb 2026
Vulnerabilities & exploits Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529In the first part of this series, I detailed my journey into macOS security research, which led to the discovery of a type confusion vulnerability (CVE-2024-54529) and a double-free vulnerability (CVE-2025-31235) in the coreaudiod system daemon through a process I call knowledge-driven fuzzing.… Google Project Zero · Global · 30 Jan 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.