Stay informed about the latest cybersecurity threats, vulnerabilities, malware campaigns, phishing trends, supply-chain attacks, and security advisories. This section provides timely updates and practical insights to help organizations understand emerging risks and strengthen their security posture.
The Advantest incident is another reminder that modern ransomware attacks are no longer primarily about encrypting systems. The more serious impact often comes from what attackers steal before encrypt…
The unpatched LMCache vulnerability demonstrates how quickly AI infrastructure can become a critical security risk. An unauthenticated remote code execution flaw in a component designed to improve LLM…
The discovery of another critical vulnerability in SonicWall's SMA1000 appliances highlights a growing concern surrounding the security of internet-facing network infrastructure. CVE-2026-102255, carr…
Attackers compromised infrastructure associated with three country-code top-level domain registries and used that control to hijack domains belonging to Google and other major organizations, demonstra…
Attackers are actively exploiting a stored cross-site scripting vulnerability in the widely used Ninja Forms WordPress plugin to compromise websites, create administrator accounts and establish m…
ASOS has confirmed a cybersecurity incident after customers received an unauthorized push notification through the retailer’s own mobile application stating that the company had been hacked and …
Japanese media giant Nikkei has disclosed two separate incidents involving unauthorized access to employee cloud accounts, one on Microsoft 365 and another on Google Workspace. The more serious o…
Atlassian has disclosed CVE-2026-21589, a critical arbitrary file-access vulnerability affecting eight of its self-hosted Data Center products: Bitbucket Data Center, Confluence Data Center, Jira…
A newly observed ClickFix campaign is using a more sophisticated delivery technique in which malicious scripts are pre-fetched into the victim’s browser cache and disguised as image content…
South Korea has launched a broad investigation into a series of cyberattacks affecting major banks and other financial institutions after evidence emerged that artificial intelligence tools may have b…
Attackers are once again exploiting CVE-2021-35394, a critical remote code execution vulnerability in the Realtek Jungle SDK, to compromise Internet-exposed IoT and networking devices. The flaw c…
Italy’s data protection authority has fined IQVIA Solutions Italy €7 million, approximately $7.8 million, after concluding that a health-data database covering roughly one million pati…
Denmark has disclosed a major breach of its Central Population Register, or CPR, after unauthorized actors abused a private Danish company’s legitimate access to the registry and extracted …
Attackers have begun targeting CVE-2026-61500, a critical authentication flaw in Rejetto HTTP File Server that allows an unauthenticated remote attacker to reconstruct the server’s session-…
Citrix has released emergency security updates for CVE-2026-88779, a newly disclosed NetScaler ADC and NetScaler Gateway vulnerability affecting appliances configured to use SAML authentication a…
The Technical University of Denmark has disclosed a serious data breach affecting DTUBasen, its identity and access management system, after attackers compromised university profiles and used the…
CISA has added CVE-2026-102489 and CVE-2026-102490, two vulnerabilities affecting the Zammad helpdesk platform, to its Known Exploited Vulnerabilities Catalog after confirmed exploitation in the …
Frontline Education, a major provider of workforce management and administrative software to U.S. school districts, is notifying customers of a data breach after attackers exploited a vulnerability in…
GitLab has patched CVE-2026-90970, a critical vulnerability in its self-hosted AI Gateway that can allow an authenticated Duo Agent Platform user to escape the prompt-template sandbox and execute…
Fortinet has disclosed a critical FortiMail vulnerability, CVE-2026-104286, that is already being actively exploited in zero-day attacks against vulnerable appliances. The flaw carries a CVSS sco…