Latest news
-
Breaches via The Record
Hackers repeatedly breached suppliers holding UK police data, watchdog finds
His Majesty’s Inspectorate of Constabulary and Fire & Rescue Services says British police data has been breach several times this decade through third-party IT suppliers.
-
Ransomware via ransomware.live
🏴☠️ Whitearmor has just published a new victim : wagyu.xyz
Wagyu.xyz is a cross-chain swap platform that allows users to exchange cryptocurrencies for native Monero (XMR) without requiring identity verification (KYC) . It routes…
-
Breaches via DataBreaches.net
System Note: October 27, 2026
Unfortunately, a backup failure has resulted in the loss of media files and documents attached to posts. They will be restored eventually, but restoring files will take…
-
AI Security via Infosecurity Magazine
ISC2 Launches Cyber-AI Workforce Coalition to Address the Future of AI Security Jobs
ISC2’s new Cyber-AI Workforce Coalition serves as a “vendor-neutral convener” to map the future of AI security careers, ISC2 CEO Scott Beale told Infosecurity
-
Threat Intel via The Record
University of New Mexico hospital diverts ambulances after cyberattack
For about two hours on Monday, the organization diverted ambulances to health systems in Albuquerque and Santa Fe. They were forced to suspend outpatient surgeries and…
-
Threat Intel via TechCrunch
US government says hackers are now exploiting critical PHP web bugs
The U.S. government cyber agency warns that hackers have figured out a way to exploit the popular PHP software, used in 70% of the web's software.
-
Ransomware via RansomLook
Bristol City Council By wallstreet
Bristol City Council is the local authority for Bristol, England. It provides public services for residents, businesses, and visitors, including council tax and…
-
Vulnerabilities via PortSwigger Research
Scalable Vector Grief
I tested eight popular SVG sanitizers and bypassed six of them. In this post, I'll show you how a response header can run JavaScript in Firefox even when the response…
- Advertisement
-
Threat Intel via Help Net Security
Hackers bury inboxes in spam then show up on Microsoft Teams posing as IT support
Threat actors are flooding employees’ inboxes with spam and then contacting them on Microsoft Teams as IT support, offering to fix the problem they created, Arctic Wolf…
-
Vulnerabilities via BleepingComputer
Tailscale warns of SSH flaws allowing root privilege escalation
The Tailscale security team is working to patch almost a dozen security vulnerabilities that could be exploited to steal credentials, crash servers, gain root…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control systems] Johnson Controls security advisory (AV26-1090)
Serial number: AV26-1090 Date: October 27, 2026 As of October 26, 2026, Johnson Controls is affected by vulnerabilities in the following product: Kantech Entrapass Prior…
-
Threat Intel via BleepingComputer
The Huntress Tragic Quadrant: Ranking Threats Hitting Businesses Hardest
Attackers are increasingly abusing legitimate IT tools, Microsoft 365 sessions, and everyday workflows to compromise businesses without triggering traditional defenses…
-
Threat Intel via SOCRadar
September 2026: FBI Breach, Clop Hijack & IDScan Leak
The major cyber attacks of September 2026 hit federal law enforcement, a rival cybercrime gang, and the companies that verify identities. ShinyHunters hijacked the Clop…
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-70277 Windows Fast FAT File System Driver Information Disclosure Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-70161 .NET Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-70007 .NET Framework Remote Code Execution Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-96225 .NET Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-69473 Windows Kernel Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-69284 Windows DCOM Server Elevation of Privilege Vulnerability
Updated an acknowledgement. This is an informational change only.
-
Vulnerabilities via Microsoft Security Response Center
CVE-2026-20942 Microsoft Edge (Chromium-based) Spoofing Vulnerability
Improper restriction of rendered ui layers or frames in Microsoft Edge (Chromium-based) allows an unauthorized attacker to perform spoofing over a network.
