Cisco patches a Nexus 9000 flaw enabling unauthenticated remote root code execution and seven IOS XR umbrella CVEs affecting every release.
Threat actors are leveraging the trusted Node.js JavaScript runtime in multiple cyber attacks as a way to deploy malicious payloads.
According to a new report published by the Symantec Threat Hunter Team today, the attack method has been put to use in attacks targeting government departments, technology companies, and hotels since February 2026.
“The technique’s appeal is that node.exe (the binary that runs Node.js) is a legitimate, signed developer tool,” the Broadcom-owned cybersecurity division said in a report shared with The Hacker News. “The attacker’s malicious code lives in interpreted scripts rather than in a binary, making it less likely to trigger signature-based detection, while a registry Run key entry can relaunch the payload at every login.”
Microsoft says a known issue that reverts mouse settings after installing the KB5120998 August 2026 preview update affects only non-English Windows 11 systems.
The bug was confirmed Friday, one day after the KB5120998 release, which includes Start menu, taskbar, and Windows search improvements for devices running Windows 11 versions 25H2 and 24H2.
According to user reports, mouse cursor personalization settings are changing or resetting automatically after installing the KB5120998 update, and affected Windows 11 users cannot restore their previous mouse settings after they are reverted.
The iPhone belonging to a member of Serbia’s student protest movement was infected with NSO Group’s Pegasus spyware, according to new findings from the Citizen Lab in collaboration with the SHARE Foundation.
“Our analysis confirmed that an iMessage zero-click exploit was used to infect the device with NSO Group’s Pegasus spyware,” the Citizen Lab said. “We found high-confidence indicators of infection from a period across December 2025 – January 2026; however, this does not preclude the possibility of additional infections.”
It’s assessed that the zero-click exploit used in the attack targeted Apple iMessage, and has been addressed by Apple with iOS 18.4.1, which was released in April 2025.
From left to right: Professor Rickie Patani, Director of the Neurobiology Programme at the NUS Life Sciences Institute (LSI) and Chair of the Neuroscience Translational Research Programme (TRP); Jamie Khoo, CEO of DayOne; and Hon Weng Chong, Founder and CEO of Cortical Labs.
The Yong Loo Lin School of Medicine, National University of Singapore (NUS Medicine) is partnering with DayOne, a Singapore-headquartered global data centre developer and operator, and Cortical Labs, a Melbourne-based biological computing startup, to establish a groundbreaking Biological Data Centre prototype at the NUS Life Sciences Institute.
On 6 August 2026, an exclusive showcase of the prototype brought together over 80 guests from the private sector and academia, as well as the technology and digital infrastructure sectors for a first look at this next frontier in computing. Attendees experienced a live demonstration of the CL1/Cortical Cloud computing units, microelectrode array integration, and real-time neural network activity, offering a powerful glimpse into how biology and technology can come together to transform the future of computing.
Researchers with the Wisconsin Center for Origins Research have discovered their first exoplanet, a 170-million-year-old planet more than 2.5 times larger than the Earth.
It’s nearly 170 million years old. It’s more than 2.5 times the size of Earth. And it’s the first exoplanet discovered and catalogued by researchers with the Wisconsin Center for Origins Research (WiCOR).
Max Kroft, a graduate student in the lab of Assistant Professor of Astronomy Thomas Beatty, is the lead author on a paper that characterizes GJ 523b, a dense exoplanet that’s classified as a “Mega-Earth” due to its massive size. The paper is currently under review and will be available through the open-access archive arXiv.