Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary A critical remote code execution vulnerability in Veeam Backup & Replication (VBR), tracked as CVE-2026-44963 (CVSS v4 9.4), allows authenticated domain users to execute arbitrary code on backup servers.…
Summary Palo Alto Networks has confirmed active exploitation of CVE-2026-0257, an authentication bypass vulnerability in PAN-OS GlobalProtect VPN. The flaw lets unauthenticated attackers forge authentication override cookies to establish unauthorized…
Summary Google has released an emergency update for Chrome to address CVE-2026-11645, an actively exploited zero-day vulnerability in the V8 JavaScript and WebAssembly engine. The flaw is an out-of-bounds read…
Summary A critical authentication bypass vulnerability in Check Point’s Remote Access VPN and Mobile Access products, tracked as CVE-2026-50751 (CVSS 9.3), has been actively exploited in the wild since at…
Summary Microsoft dropped a massive June 2026 Patch Tuesday, addressing over 200 security vulnerabilities across its product line — one of the largest patch cycles in the company’s history. Among…
Summary VRChat has disclosed a data breach affecting approximately 2.4 million user accounts in the United States. The company discovered unauthorized access to data stored in its cloud environment in…
Summary Danish pharmaceutical giant Novo Nordisk has disclosed a cybersecurity breach affecting patient data from some of its clinical trials. The company revealed on June 11, 2026, that attackers gained…
Summary CISA has added CVE-2026-10520 — a maximum-severity (CVSS 10.0) OS command injection vulnerability in Ivanti Sentry — to its Known Exploited Vulnerabilities catalog, ordering federal agencies to patch by…
Summary Europol has announced the takedown of “AudiA6,” a professional cryptocurrency laundering operation that processed over €336 million in illicit profits for ransomware gangs and cybercriminal networks between 2022 and…
A joint operation led by Group-IB, INTERPOL, and Algerian authorities has dismantled “SniperDz,” a Phishing-as-a-Service (PhaaS) platform that operated for nine years while providing sophisticated phishing kits targeting over 30…