Latest news

Advertisement
  1. Breaches via The Record

    Hackers repeatedly breached suppliers holding UK police data, watchdog finds

    His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers.

  2. Ransomware via ransomware.live

    🏴☠️ Whitearmor has just published a new victim : wagyu.xyz

    Wagyu.xyz is a cross-chain swap platform that allows users to exchange cryptocurrencies for native Monero (XMR) without requiring identity verification (KYC) . It routes…

  3. Breaches via DataBreaches.net

    System Note: October 27, 2026

    Unfortunately, a backup failure has resulted in the loss of media files and documents attached to posts. They will be restored eventually, but restoring files will take…

  4. AI Security via Infosecurity Magazine

    ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs

    ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity

  5. Threat Intel via The Record

    University of New Mexico hospital diverts ambulances after cyberattack

    For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surgeries and…

  6. Threat Intel via TechCrunch

    US government says hackers are now exploiting critical PHP web bugs

    The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.

  7. Ransomware via RansomLook

    Bristol City Council By wallstreet

    Bristol City Council is the local authority for Bristol, England. It provides public services for residents, businesses, and visitors, including council tax and…

  8. Vulnerabilities via PortSwigger Research

    Scalable Vector Grief

    I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response…

  9. Advertisement
  10. Threat Intel via Help Net Security

    Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support

    Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf…

  11. Vulnerabilities via BleepingComputer

    Tailscale warns of SSH flaws allowing root privilege escalation

    The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root…

  12. Vulnerabilities via Canadian Centre for Cyber Security

    [Control systems] Johnson Controls security advisory (AV26-1090)

    Serial number: AV26-1090 Date: October 27, 2026 As of October 26, 2026, Johnson Controls is affected by vulnerabilities in the following product: Kantech Entrapass Prior…

  13. Threat Intel via BleepingComputer

    The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest

    Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses…

  14. Threat Intel via SOCRadar

    September 2026: FBI Breach, Clop Hijack & IDScan Leak

    The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop…

  15. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability

    Updated an acknowledgement. This is an informational change only.

  16. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-70161 .NET Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  17. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability

    Updated an acknowledgement. This is an informational change only.

  18. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-96225 .NET Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  19. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  20. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability

    Updated an acknowledgement. This is an informational change only.

  21. Vulnerabilities via Microsoft Security Response Center

    CVE-2026-20942 Microsoft Edge (Chromium-based) Spoofing Vulnerability

    Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.