Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
Summary Vercel, the popular cloud platform behind Next.js hosting and serverless deployments, has confirmed a security incident involving unauthorized access to internal company systems. The breach was identified on April…
Summary Sweden has publicly attributed a failed destructive cyberattack on a thermal power plant in western Sweden to pro-Russian hacker groups with connections to Russian intelligence and security services. The…
Summary Adobe has released an emergency security update to address CVE-2026-34621, a critical zero-day vulnerability in Adobe Acrobat and Acrobat Reader for both Windows and macOS. The flaw — a…
Summary SAP has patched a near-maximum severity SQL injection vulnerability (CVE-2026-27681, CVSS 9.9) affecting its Business Planning and Consolidation (BPC) and Business Warehouse (BW) financial systems as part of the…
Summary The ShinyHunters cybercrime group has breached Rockstar Games, the studio behind Grand Theft Auto, exfiltrating approximately 78.6 million records from their Snowflake cloud environment. The attack vector wasn’t a…
Summary A growing wave of supply chain attacks is exploiting trusted automation tools like Dependabot and Renovate as vectors for delivering malware into production environments. According to research from GitGuardian…
Summary The US Coast Guard’s first-ever mandatory cybersecurity framework for ports, vessels, and offshore facilities has officially taken effect, ending two decades of voluntary compliance in the maritime sector. The…
Summary The Cybersecurity and Infrastructure Security Agency (CISA) has added a new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog: CVE-2026-34197, an Apache ActiveMQ Improper Input Validation vulnerability that is…
Summary Security researchers have disclosed a new prompt injection attack method called “Comment and Control” that can hijack AI coding agents through untrusted GitHub data — PR titles, issue comments,…
Summary Fortinet has released emergency patches for two critical vulnerabilities in its FortiSandbox product, both scoring CVSS 9.8. These flaws allow unauthenticated attackers to bypass authentication and execute arbitrary code…