Monitored safety sources
Clear summaries of cybersecurity and online-safety developments, with links to the original source.
Thailand scam alerts
A Thai Post report citing Police Region 5 says scammers called residents in several Chiang Mai districts, spoke Northern Thai, and offered a free transformer change or electricity-deposit refund. They then moved victims to LINE and manipulated banking-app settings to induce transfers.
A message claims an e-ticket is overdue and sends a QR code or shortened link to a fake payment page. Check through the official Government app, Police Care, or PTM system instead.
Police described cases beginning with a telecom or SIM allegation, then a LINE video call with someone in uniform who threatens a criminal case, orders secrecy, and demands money to “prove innocence.” Police say officers do not investigate by LINE video call or demand transfers for verification.
AOC describes scammers cloning relatives’ voices and using AI-generated police or government images and video. A familiar face or voice is not enough to verify a request; call back through a number you already know.
PEA says it does not send staff to collect bills at homes or take cash on the spot. Do not pay someone who threatens an immediate disconnection; verify with PEA at 1129.
Latest updates
New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be triggered by remote attackers via a file that is designed to exploit the vulnerability. Such a file can be sent to the user via email, instant message, or collaboration tools like Teams and Slack. Alternatively, users … More → The post Microsoft fixes exploited Mark of the Web bypass vulnerability (CVE-2026-96951) appeared first on Help Net Security.
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements. The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek.
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.
Microsoft fixed three Windows BitLocker vulnerabilities CVE-2026-85920, CVE-2026-88070, and CVE-2026-83500 that could enable privilege escalation or bypass security protections in its October 2026 updates. BitLocker is a core Windows disk-encryption feature designed to protect data if a laptop, desktop, or storage drive is lost or stolen. It helps prevent someone from reading protected files by […] The post Windows BitLocker Vulnerabilities Security Feature Bypass and Privilege Elevation Attacks appeared first on Cyber Security News.
IT administrators searching Google for PuTTY may see a convincing fake download result mixed with legitimate links. Researchers documented a campaign that uses a lookalike website to deliver a malicious Windows installer disguised as the popular SSH client. The installer opens a working PuTTY window as a decoy while secretly starting a separate malware chain […] The post Hackers Abuse Google Search to Attacks ITadmins with Weaponized PuTTY Installer appeared first on Cyber Security News.
Security researchers ran their own code inside a protected part of Windows that is meant to stay sealed off even when the rest of the computer is taken over. The protected area is a VBS enclave, an isolated slice of memory the operating system uses to guard secrets, and the one they broke into handles passwords for a Windows anti-phishing feature. The work was done in a lab as a proof of
Netskope tracks four XWorm versions in the wild, 46 plugins, and new tools for location, audio and live browser control, with detections up fourfold. Netskope Threat Labs has been following XWorm since September 2024, and its latest report shows the malware has changed a lot. Over the past year the team identified four distinct versions […]
In this Help Net Security interview, Kunal Modasiya, Senior VP & GM at Qualys, talks about why patching is still hard to get right. He explains how business pressure, revenue-critical systems, and patches that break things keep fixes from going out. Modasiya argues that speed alone has limits and that teams should look at the whole remediation workflow. He discusses how proactive teams judge risk, why the gap between exposure time and weaponization time matters … More → The post Patching and preventing issues: What are the lessons you can learn? appeared first on Help Net Security.
Meshery is an open-source tool for designing, deploying and managing Kubernetes infrastructure, built by Layer5 and its community and hosted as a Cloud Native Computing Foundation project. Teams use it to lay out clusters and applications on a visual canvas, check the design, and push it to multiple clusters and clouds from one central console, without hand-editing YAML. Kubernetes runs on configuration files, and one wrong field or mismatched API version can sink a deployment. … More → The post Meshery: Open-source cloud-native manager for Kubernetes appeared first on Help Net Security.
Organizations are reporting that employees face threats to their families, stalking, physical violence, and abduction. But these alarming claims are hard to verify.
I can explain PlodScam’s available features and safety guidance.