Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
A new, unpatched local privilege escalation vulnerability in the Linux kernel — dubbed “Dirty Frag” — has been publicly disclosed, enabling unprivileged local users to gain root access on most…
The cybercrime group ShinyHunters has escalated its attack on Instructure’s Canvas learning management system, defacing the platform’s login page with a ransom demand threatening to leak data from 275 million…
Summary The United States National Guard has been activated in multiple states to respond to ransomware attacks that overwhelmed local government cybersecurity capabilities. In Minnesota, Governor Tim Walz authorized the…
Summary Europol has released its Internet Organised Crime Threat Assessment (IOCTA) 2026, titled “How Encryption, Proxies, and AI Are Expanding Cybercrime.” The annual report paints a stark picture of an…
Summary Twelve critical security vulnerabilities have been disclosed in vm2, the widely-used Node.js library for running untrusted JavaScript inside sandboxed environments. The flaws — including CVE-2026-24118, CVE-2026-24120, CVE-2026-24781, and CVE-2026-26332,…
What Happened Security firm Rapid7 has attributed a sophisticated ransomware attack to MuddyWater (aka Mango Sandstorm, Seedworm, Static Kitten), an Iranian state-sponsored hacking group, in what researchers describe as a…
What Happened The Apache Software Foundation has released version 2.4.67 of the Apache HTTP Server to address CVE-2026-23918 (CVSS 8.8), a critical double-free vulnerability in the HTTP/2 protocol handler (mod_http2).…
What Happened Palo Alto Networks has confirmed that a critical zero-day vulnerability in its PAN-OS software is being actively exploited in the wild. Tracked as CVE-2026-0300, the flaw is a…
What Happened Microsoft Defender researchers have published a detailed analysis of CVE-2026-31431, a high-severity local privilege escalation vulnerability in the Linux kernel’s cryptographic subsystem. Dubbed “Copy Fail,” the flaw affects…
Summary Deniss Zolotarjovs, a Latvian national who served as a negotiator for the notorious Karakurt ransomware group (also tracked as TommyLeaks and SchoolBoys Ransomware), has been sentenced to 8.5 years…