The Nutex Health cyberattack is concerning primarily because the company has already confirmed data exfiltration, even though the investigation has not yet established exactly what was taken or whose information was affected. Nutex disclosed the incident in an SEC filing after…
The massive DDoS attack against Norway’s shared government digital infrastructure is an important reminder that cybersecurity incidents do not need to involve data theft…
The active exploitation of CVE-2026-21962 affecting Oracle HTTP Server and the Oracle WebLogic Server Proxy Plug-in is especially serious because the vulnerable componen…
CISA’s August 24, 2026 addition of CVE-2026-21962 to the Known Exploited Vulnerabilities catalog deserves immediate attention because the vulnerability affects Oracle HT…
The active exploitation of vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress is particularly serious because t…
The disclosure of CVE-2026-75501 in the Calix GS7 XGS GS5239XG residential gateway is particularly serious because it breaks one of the mos…
The ReliaQuest incident is a useful example of why modern identity attacks cannot be judged simply by whether an attacker obtained a userna…
The breach involving South Korea’s government-backed startup platform Modu-ui Changup is a particularly good example of why encryption alon…
The disclosure of CVE-2026-18963 in Keycloak deserves immediate attention because it affects one of the most sensitive workflows in any ide…
The cyberattack on Latvia’s Road Traffic Safety Directorate, CSDD, is particularly significant because the attackers did not merely obtain …
CISA’s August 21, 2026 addition of CVE-2026-73570 to the Known Exploited Vulnerabilities catalog materially increases the urgency around th…
The Oz Hair and Beauty data breach is another useful reminder that the absence of stolen payment-card details does not make a customer-data…
The SickKids cybersecurity incident is a useful reminder that an organisation’s security posture increasingly depends on software it does n…
The discovery of more than 9,300 still-valid AWS access keys exposed publicly over the past four years is a striking reminder that cloud co…
The SynkLoader campaign is an important example of how phishing is moving beyond email and into collaboration platforms that employees natu…