Latest news
-
Vulnerabilities via Microsoft Security Response Center
Chromium CVE-2026-106278: Use after free
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome…
-
Ransomware via HIPAA Journal
Ransomware Groups Increasingly Resorting to Real World Threats
The tactics of ransomware groups are constantly changing to increase pressure on victims to give in to their demands. Initially, file encryption alone was sufficient…
-
Breaches via ransomware.live
🏴☠️ N0n has just published a new victim : EnVision Eye Care
Healthcare - Ophthalmology (US) · Mississippi, USA | Patient records of a Mississippi ophthalmology practice: 13,308 patient records with names and dates of birth, taken…
-
AI Security via BleepingComputer
Employees using personal ChatGPT at work? Here's what IT admins need to do
Employees using personal ChatGPT accounts at work can expose sensitive company data, even when their organization provides an approved Enterprise workspace. NordLayer…
-
Vulnerabilities via Security Affairs
F5 addressed critical RCE flaws in NGINX
F5 addressed multiple vulnerabilities, including critical RCE flaws in NGINX that attackers could exploit without authentication. Security and application delivery firm…
-
AI Security via Cyble
Your AI Agent Doesn’t Have MFA
Every Cybersecurity Awareness Month campaign rests on four habits: Strong passwords, Multifactor authentication, Spotting phishing, and keeping software updated. All…
-
Vulnerabilities via Rapid7
Rapid7 Analysis: GitLab CI/CD Regex Integer Overflow (CVE-2026-97229)
OverviewOn October 12, 2026, GitLab released 19.4.2, 19.3.5, and 19.2.8 to fix CVE-2026-97229, an integer overflow in its CI/CD regular-expression handling. The issue…
-
Threat Intel via The Record
Moscow police detain suspected DataSuckers hackers linked to breaches in Ukraine and Russia
Russian authorities have reportedly detained three suspected members of the DataSuckers hacking group following a cyberattack on a popular restaurant chain that exposed…
- Advertisement
-
Vulnerabilities via Canadian Centre for Cyber Security
Palo Alto Networks security advisory (AV26-1056)
Serial number: AV26-1056 Date: October 16, 2026 As of October 15, 2026, Palo Alto Networks is affected by a vulnerability in the following product: Idira Secrets Manager…
-
AI Security via Horizon3.ai
Meeting the ECB’s AI-Enabled Cybersecurity Supervisory Recommendations with NodeZero®
As AI accelerates vulnerability discovery and exploitation, financial institutions need evidence that their defenses can withstand the attack paths an adversary could…
-
Vulnerabilities via Canadian Centre for Cyber Security
[Control Systems] Moxa security advisory (AV26-1055)
Serial number: AV26-1055 Date: October 16, 2026 As of October 16, 2026, Moxa is affected by vulnerabilities in the following product: AIG-302 Series Prior to or equal to…
-
Vulnerabilities via Chrome Releases
Chrome Dev for Android Update
Hi everyone! We've just released Chrome Dev 158 (158.0.8106.0) for Android. It's now available on Google Play.
-
Vulnerabilities via Canadian Centre for Cyber Security
BeyondTrust security advisory (AV26-1054)
Serial number: AV26-1054 Date: October 16, 2026 As of October 15, 2026, BeyondTrust is affected by a vulnerability in the following product: Remote Support Prior to or…
-
Breaches via The Record
Baltimore suburb confirms August data breach after ransomware claims
Anne Arundel County, Maryland, said an intruder stole files from government systems, and investigators are working to assess how much data was exposed.
-
Breaches via DataBreaches.net
KR: NHIS Employee Sold Data, Victims Uninformed for Three Months
In today’s reminder of the insider threat, Kim Ji-won reports: A National Health Insurance Service (NHIS) employee was dismissed for illegally selling personal…
-
AI Security via Cloudflare
Continuous accountability for Verified bots
A driver’s license tells you who someone is and that they passed a driving test, not whether they’ll drive responsibly in the future. The same is true for bots…
-
Threat Intel via Rapid7
Rapid7 Intelligence Wins the 2026 Péter Szőr Award for Outstanding Research
Some awards you're happy to receive, while others make you stop for a moment. Receiving the 2026 Péter Szőr Award this week at Virus Bulletin in Seville for our…
-
AI Security via Dark Reading
When AI Agents Commit Breaches, Humans May Not Be Held Liable
As agents escape containment and access external systems, responsibility remains human. Accountability, however, is much less settled.
-
Ransomware via Infosecurity Magazine
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
New report warns that threats of violence against employees of organizations hit by ransomware are on the rise as attackers find new ways to guarantee payments
-
Threat Intel via The Record
Suspected Chinese espionage attackers abusing BeyondTrust IT support zero-day
An alleged Chinese state-backed group is using a new zero-day affecting BeyondTrust IT support software to conduct espionage attacks.