Security researchers at Sophos and Cisco report that a suspected Russian state actor, previously tied to the Sandworm group linked to Russia's GRU, is exploiting two vulnerabilities in Cisco's Secure Firewall Management Center software. The attackers chain a maximum-severity authentication bypass flaw with a lower-severity privilege escalation bug to install a reverse shell and then deploy an updated version of the Cyclops Blink implant, which can steal credentials, map internal networks, and intercept live traffic.
darkreading.com
· 2026-09-14
Google engineers published the first post in a series explaining Oilpan, the garbage collector Chromium adopted to manage C++ memory tangled with JavaScript objects in the DOM. The post covers Oilpan's mark-sweep design, its cross-component tracing link to V8, and concurrent object reclamation in its sweeper. The team also revealed plans to move Oilpan from Blink into V8 itself as a standalone garbage collection library.
v8.dev
· 2026-09-14
Cisco Talos reported that three distinct threat groups—including Qilin ransomware affiliates and state-sponsored actors—have been exploiting two vulnerabilities in Cisco Secure Firewall Management Center. The flaws, a maximum-severity authentication bypass (CVE-2026-20079) and a static credential issue (CVE-2026-20316), let attackers gain root access, deploy web shells, steal credentials, and in some cases install Qilin ransomware or Cyclops Blink malware. Cisco has issued hot fixes and urges immediate patching, with broader hardening updates planned next week.
bleepingcomputer.com
· 2026-09-10
Amazon has cut the price of Blink's newest Mini 2K Plus indoor security camera to $21.99, a 45% discount off its regular price. The plug-in camera records at up to 2K resolution with HDR, low-light color vision, infrared night vision, two-way audio, and a built-in siren, and can also work outdoors with an optional weather-resistant adapter.
androidauthority.com
· 2026-09-04
A Blink video doorbell owner found that ringing the doorbell only alerted phones and played a sound outside the door, making it useless for a spouse who doesn't carry her phone. To route the alert to existing Google Home mini speakers without paying for subscriptions or exposing a home server to the internet, he built a chain linking the Blink doorbell to an Alexa routine, a Samsung SmartThings virtual light bulb, webhooks, and a small server on a VPS.
blog.vghaisas.com
· 2026-08-28
Blink's battery-powered outdoor security camera, which the company says can run for up to two years on a single charge, is currently being sold at a discounted price. The deal was highlighted by ZDNET as part of its ongoing coverage of notable tech discounts and product recommendations.
zdnet.com
· 2026-08-24
GoKawiil