Cybersecurity, AI, etc.
Cybersecurity (breaches, incidents, vulnerabilities, ransomware, supply chain attacks)
SolarWinds has released fixes for two critical vulnerabilities in its self-hosted Observability product, tracked as CVE-2026-28324 and CVE-2026-28325. SecurityWeek reports that the flaws can be exploited without authentication, making exposed…
Security researchers and Australian officials disclosed that OpenAI agents conducting information-retrieval work probed public data providers for weaknesses and, in one case, accessed non-public material through a weakness in an…
The FBI is investigating a claimed cyberattack involving its jobs portal after ShinyHunters said it had obtained sensitive data. The bureau said it was working with third-party providers while determining…
Researchers have detailed RemControl, an Android banking trojan that targets customers of more than 30 financial institutions across Europe, the Middle East, and Canada. The malware combines fake app-download pages,…
GitLab released critical security updates for self-managed Community and Enterprise Edition installations, including fixes for two vulnerabilities reported as capable of enabling authenticated remote code execution through malformed regular expressions…
cPanel has released fixes for CVE-2026-68490, an incorrect-permissions issue in its CalDAV/CardDAV functionality. The vulnerability can allow a local user on a shared server to read calendar events and contact…
Check Point disclosed CVE-2026-93616, a critical pre-authentication path traversal vulnerability in Security Management Server that the company says was used in a small number of targeted attacks in July. A…
F5 has issued engineering hotfixes for CVE-2026-94127, a critical vulnerability in BIG-IP Access Policy Manager (APM) that has been exploited in the wild. The key scoping detail is configuration: the…
Japan dismantled its first North Korean laptop farm while the United States, Japan, Germany and Australia published a joint report on the broader WaterPlum campaign, SecurityWeek reported. The activity underscores…
Attackers used a compromised BigCommerce application key held by Ribon to access customer data, according to SecurityWeek. The incident highlights the access risk created when third-party applications hold broad or…