Microsoft has shipped security updates on an unscheduled basis for .NET 8, .NET 9, .NET 10 and the third release candidate of .NET 11. The driver is CVE-2026-111497, a buffer overflow rooted in how the framework invokes the Brotli decompression algorithm. The company’s advice is to install the patches immediately. Details went up on the … Read more
A single ring, a hang-up and a foreign number in the call log—often +355, +225 or +234—is bait. Calling back connects you to a premium-rate line, with a cut going to the fraudster. The Guardia Civil has warned about wangiri since at least 2016; Maldita.es compiled its alerts in June 2022. The risk is billing … Read more
Almost every scam on Wallapop and Vinted begins with the same demand: move the conversation elsewhere. A buyer who prefers WhatsApp, a link to “receive” a payment, a courier that is supposedly cheaper than the platform’s own service. Once a user accepts, the protection that makes a marketplace safer than a classifieds board vanishes. TechNews … Read more
TechNews DevTop examines stalkerware: software used by someone close to the victim to monitor a phone in secret. Unlike random malware, it usually arrives through physical access and an unlocked screen. The Coalition Against Stalkerware—a domestic-violence and cybersecurity alliance founded in November 2019—warns that hasty deletion can alert the installer and intensify abuse. Safety planning … Read more
Romance fraud is rarely an improvised con. It is a repeatable playbook: build trust over weeks, then introduce money—usually as an emergency or a cryptocurrency investment. If someone you have never met in person asks for cash or pushes you toward a platform they recommend, the safest answer is a flat no. The scale is … Read more
A friendly voice on the phone claims to be from Microsoft support and warns that your computer is infected. The solution, the caller insists, is to install a program so a technician can inspect it remotely. No such technician exists; the software is the doorway. The guide is for home users, especially those who help … Read more
Google has quietly moved one of Chrome’s most sensitive security checks off your machine. The browser’s AI-driven scam detection, which once ran entirely on-device, now sends page text to a server-side Gemini model for analysis — a shift the company frames as a horsepower upgrade rather than a privacy trade-off. The change was disclosed on … Read more
Plex has confirmed that a chain of vulnerabilities in Plex Media Server, first documented in September, is now “being actively and widely exploited.” The wording appears verbatim in a security notice the company refreshed on 19 October, and it marks the moment a quietly patched bug class turned into a live, internet-wide campaign. Chained together, … Read more
Researchers at Binghamton University have shown that a backdoor can be implanted in a language-model-driven robot without touching the robot or the central model. The compromised component is the slim adaptation layer that fits a general-purpose model to a specific environment, and once it is poisoned, a short invented keyword is enough to make the … Read more
A seemingly harmless message offering paid online tasks has become one of the fastest-growing frauds on messaging platforms. The so-called task scam — also known as the “like scam” — promises easy money for liking posts or rating products, then demands deposits that victims never recover. TechNews DevTop breaks down the playbook, warning signs and … Read more