Azerbaijani Energy Firm Hit by Repeated Microsoft Exchange Exploitation
The repeated exploitation of Microsoft Exchange at an Azerbaijani oil and gas company shows how persistent threat actors operate when remediation is incomplete. The campaign, attributed by Bitdefender with moderate-to-h…
May 13, 2026
Foxconn confirms cyberattack claimed by Nitrogen ransomware gang
The Foxconn cyberattack is a strong reminder that manufacturing and supply-chain environments remain prime targets for ransomware and data-theft groups. Foxconn confirmed that some North American factories were impacted…
May 13, 2026
Microsoft says some users can't install Office on Windows 365 devices
Microsoft’s warning that some users are unable to download and install Office on Windows 365 devices highlights the operational risk of cloud-managed desktop environments. Windows 365 gives organizations flexibility thr…
May 13, 2026
Android Adds Intrusion Logging for Sophisticated Spyware Forensics
Android’s new Intrusion Logging feature is an important step for protecting high-risk users such as journalists, activists, executives, government officials, and others who may be targeted by sophisticated spyware. Trad…
May 13, 2026
UK fines water supplier $1.3M for exposing data of 664k customers
The South Staffordshire Water incident shows why critical infrastructure providers must treat customer data protection with the same seriousness as service availability. A phishing-led compromise that remained undetecte…
May 13, 2026
Signal adds security warnings for social engineering, phishing attacks
Signal’s new security warnings are a practical response to a growing reality: encryption protects messages in transit, but it cannot protect users from being socially engineered into handing over access themselves. Atta…
May 13, 2026
Microsoft releases Windows 10 KB5087544 extended security update
Microsoft’s Windows 10 KB5087544 Extended Security Update is a reminder that Windows 10 has now moved into a security-maintenance phase, not a feature-development phase. For organizations still running Windows 10 Enterp…
May 13, 2026
Fortinet warns of critical RCE flaws in FortiSandbox and FortiAuthenticator
Fortinet’s warning about critical RCE vulnerabilities in FortiSandbox and FortiAuthenticator highlights the risk of security infrastructure itself becoming an attack path. FortiSandbox is designed to detect and analyze …
May 13, 2026
Windows 11 KB5089549 & KB5087420 cumulative updates released
endpoint patching remains a core part of enterprise security. These updates cover Windows 11 25H2/24H2 and 23H2 and include the May 2026 Patch Tuesday security fixes for 120 vulnerabilities, including 17 rated critical.…
May 13, 2026
New Exim BDAT Vulnerability Exposes GnuTLS Builds to Potential Code Execution
The Exim BDAT vulnerability, tracked as CVE-2026-45185 and also called “Dead.Letter,” is a serious reminder that email infrastructure remains a high-value attack surface. The flaw affects Exim versions 4.97 through 4.99…
May 13, 2026
Škoda warns of customer data breach after online shop hack
The Škoda online shop breach shows that even customer-facing commerce portals can become a serious security risk when vulnerabilities are left exposed. While Škoda has stated that payment card data was not stored on the…
May 12, 2026
Android 17 to expand banking scam call and privacy protections
Android 17’s expanded protections against banking scam calls are a timely step in the right direction. Financial fraud has moved beyond malicious apps and phishing links; attackers now combine caller ID spoofing, social…
May 12, 2026
