IT news

Advertisement: Prime Day 2026 - these are the 60 best deals on Amazon

Since midnight, Prime members have been able to secure the variety of offers on Amazon Prime Day. We have put together the best 60 deals. (Prime Day, Amazon)

Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks

The high-severity use-after-free vulnerability in Samsung's KNOX security framework affected Android-powered Galaxy devices from the S9 through S25. The post Eight-Year-Old Samsung KNOX Flaw Exposed Millions of Galaxy Devices to Kernel Attacks appeared first on SecurityWeek.

Two Scattered Spider members plead guilty over cyberattack that crippled London transit

A 20-year-old and an 18-year-old admitted to infiltrating the network of Transport for London in 2024, disrupting public transportation services for months.

Meta launches cheaper smart glasses without Ray-Ban

For the past three years, "Meta" and "Ray-Ban" have been synonymous in the smart glasses space. Not anymore. Yesterday, I slipped on several pairs of Meta Glasses - no Ray-Bans - in three different styles and seven colors. One style, I was told several times by various enthusiastic Meta spokespeople, is a collaboration with socialite and reality TV star Kylie Jenner. Meta could've struck out on its own from the get-go, but teaming up with EssilorLuxottica and the Ray-Ban brand was a savvy move i

I’m not giving up my Steam Deck for MSI’s new Claw

This is not a review of the MSI Claw 8 EX AI Plus, the first gaming handheld available with Intel's new Arc G3 Extreme handheld gaming chip. Now that my colleague Sean Hollister is done reviewing the Steam Machine, I'll let him go deep on the new Claw at some point in the future. This article, instead, is my first impressions of the new MSI Claw as someone who primarily plays games on a Steam Deck OLED. Sean called the Claw the "next-gen handheld," and I wanted to find out: Would it be a worthwh

Valve confirms it’s working with Intel and Nvidia on SteamOS for more GPUs

A YouTuber got SteamOS running on an MSI Claw 8 AI Plus like this one. | Photo by Sean Hollister / The Verge MSI's Intel-powered Claw gaming handhelds have so far mostly been Windows machines, meaning that anyone who picks one up has to deal with the crusty experience that is Windows on a handheld gaming PC. But now, both Valve and Intel tell The Verge that they're working with each other, and people like YouTuber ETA Prime are already having good experiences with SteamOS on Intel. Valve's recen

My go-to Kindle is back at its best price yet for Prime Day

The latest Kindle Paperwhite is $35 off. | Image: Amazon If you’ve been thinking about picking up a Kindle, Amazon’s Prime Day sale is a great time to do it. The retailer is currently offering steep discounts on several of its e-readers, including the latest Kindle Paperwhite with 16GB of storage and ads, which is down to $124.99 ($35 off) at Amazon. If you’d prefer wireless charging and double the storage, the ad-free Kindle Paperwhite Signature Edition is also on sale for $144.99 ($55 off) at

Space history and future: End of the space shuttle era and space for SpaceX

The launch pad in California was once intended to take space shuttles into space. Things have turned out differently, and now the future of the launch platform is being shaped with SpaceX. (SpaceX, space travel)

CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct

Carl Froggett combines CISO and CIO. He currently occupies both positions at Deep Instinct. Before then, he was CISO at Citi for almost 17 years. The post CISO Conversations: Carl Froggett – Combining CISO and CIO at Deep Instinct appeared first on SecurityWeek.

FortiBleed Attackers Turn Firewalls Into Credential Stealers as Heists Persist

The threat actors engineered a Golang-based sniffer to target 430,000 FortiGate firewalls and identify 110 million credentials in the ongoing global campaign.

Advertisement: Bicycle computer with GPS on Prime Day at a low price on Amazon

The Bryton Rider S810 bike computer with GPS, offline maps and Strava Live Segment is heavily discounted on Amazon on Prime Day. (Technology/Hardware, GPS)

Joint press statement: Strengthening the Strategic Partnership between the European Union and Kazakhstan

European Commission Statement Brussels, 23 Jun 2026 H.E. Mr. Kassym-Jomart Tokayev, President of the Republic of Kazakhstan, paid an official visit to Brussels on 23 June 2026 and met with H.E. Mr. António Costa,...

Obligations are not fulfilled: Serious allegations against Instagram, Tiktok, YouTube and Co.

In a study, consumer advocates show that social media providers do not adequately protect minors from risks. (Social network, consumer protection)

Webinar: Why email security teams are drowning in alerts

Phishing, BEC, and account takeover attacks continue to overwhelm security teams with alerts and investigations. This webinar explores how behavioral AI can help automate detection and response workflows, reducing alert fatigue and improving operational efficiency. [...]

EU and Kazakhstan strengthen strategic partnership during leaders' meeting in Brussels

European Commission Press release Brussels, 23 Jun 2026 The President of the European Commission, Ursula von der Leyen, and the President of the European Council, António Costa, welcomed today Kassym-Jomart Tokayev, President of Kazakhstan, in Brussels. During the visit, the EU and Kazakhstan signed a joint press statement, as well as several agreements that will deliver for citizens and business on both sides.

“Poster in the Bundestag: Freedom of science – the freedom to research” – Vice President Andrea Lindholz opens exhibition in parliament

Algerian Man Extradited to US for Running Cybercrime Marketplaces

26-year-old Abdellah Belmili faces up to 30 years in prison for allegedly operating the marketplaces Market0Day and Spoxy. The post Algerian Man Extradited to US for Running Cybercrime Marketplaces appeared first on SecurityWeek.

AI for advertisers: OpenAI aims for $100 billion in advertising revenue

At a festival designed to recognize people in the creative industries, OpenAI shared insights into its advertising model. (AI, online advertising)

Siemens Products using OpenSSL

View CSAF Summary OpenSSL has published a stack based buffer overflow vulnerability that allows a remote attacker to cause a denial of service (DoS) or potentially allow for remote code execution. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens Products using Ope

Siemens SIPROTEC 5 Using DIGSI5 Protocol

View CSAF Summary SIPROTEC 5 is vulnerable to arbitrary file uploads by authenticated users using the DIGSI 5 protocol. This could allow an attacker to upload malicious configuration files, potentially causing a permanent denial of service condition. As a mitigation measure, users of the CP050 and CP150 device models are advised to upgrade to version 9.90 or later. For CP300 device models, devices 7ST85 and 7ST86 are advised to upgrade to version 10.00 or later, while the remaining models should

Hubbell Aclara Metrum Cellular Web Interface

View CSAF Summary Successful exploitation of this vulnerability could allow attackers to manipulate critical device settings and repeatedly disrupt operations, potentially causing a loss of communications to the device. The following versions of Hubbell Aclara Metrum Cellular Web Interface are affected: Aclara Metrum Cellular Web Interface CVSS Vendor Equipment Vulnerabilities v3 7.5 Hubbell Hubbell Aclara Metrum Cellular Web Interface Missing Authentication for Critical Function Background Crit

FTC Files Amicus Brief to Protect Consumers from Pharmaceutical Monopolies

The Federal Trade Commission filed an amicus brief in an antitrust case alleging that drug manufacturer Johnson & Johnson illegally maintained a monopoly through anticompetitive conduct.View Press Release

ABB Freelance Security Lock

View CSAF Summary Successful exploitation of this vulnerability could allow access to underlying OS functions even when Freelance Operations is active, depending on system configuration and user permissions. The following versions of ABB Freelance Security Lock are affected: ABB System Version (<=Freelance 2013) installed with ABB Freelance Security Lock(All versions) vers:all/* ABB System Version (Freelance 2013 SP1) installed with ABB Freelance Security Lock(All versions) vers:all/* ABB System

Impact of Linux Kernel vulnerabilities on B&R products

View CSAF Summary B&R is aware of publicly reported vulnerabilities affecting the Linux kernel versions shipped with the products listed as affected in the advisory. Successful local exploitation of these vulnerabilities could allow an attacker to escalate privileges on the affected system. Public proof-of-concept exploits are available for the vulnerabilities described herein. At the time of publication of this advisory, B&R had no evidence of active exploitation targeting B&R products. The fol

Siemens WinCC Certificate Manager

View CSAF Summary WinCC Certificate Manager insufficiently protects key material that could allow an attacker to extract sensitive information. Siemens has released a new version for SIMATIC WinCC Unified PC Runtime V21 and recommends to update to the latest version. Siemens recommends specific countermeasures for products where fixes are not, or not yet available. The following versions of Siemens WinCC Certificate Manager are affected: SIMATIC WinCC Unified PC Runtime V16 vers:all/* SIMATIC Wi

Siemens SINEC INS

View CSAF Summary SINEC INS before V1.0 SP2 Update 6 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version. The following versions of Siemens SINEC INS are affected: SINEC INS vers:intdot/<1.0.2.6 CVSS Vendor Equipment Vulnerabilities v3 8.8 Siemens Siemens SINEC INS Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection'), Path Traversal: '/dir/../filename', Execution with Unnecessary Privileges, Use of a One-Way Hash with a Predictable Salt Background Critical Infrastructure S

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2025-67038 Lantronix EDS5000 Code Injection Vulnerability CVE-2026-34908 Ubiquiti UniFi OS Improper Access Control Vulnerability CVE-2026-34909 Ubiquiti UniFi OS Path Traversal Vulnerability CVE-2026-34910 Ubiquiti UniFi OS Improper Input Validation Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose s

GPT 5.5 Cyber ​​beats myth: Update to OpenAI's security model

With a security initiative, OpenAI is competing with Anthropic's myth and also offers a security review service for open source projects.

Advertisement: Ninja Luxe Premier coffee maker with a high Prime discount

The Ninja Luxe Premier 3-in-1 coffee machine is 150 euros cheaper on Prime Day. A mobile alternative from OutIn is also reduced. (Technology/Hardware)

FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances

Attackers can send crafted media files to execute code in any application that uses FFmpeg’s libavcodec library. The post FFmpeg PixelSmash Flaw Allows RCE on Video Players, Media Servers, NAS Appliances appeared first on SecurityWeek.