GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution. "GitLab...
Two merchant ships were attacked off Bulgaria’s coast overnight into Oct. 13, according to a report by local news agency BGNES, which cited information…
This week's letters come from readers questioning the Trump administration's decision to purchase Russian diesel fuel amid rising prices in the United States. An American reader argues the deal...
Stock spoiled at hundreds of stores as manufacturer says affected equipment ran outdated firmware
Despite the recent failure of Kyiv's early warning system and threats to halt U.S. intelligence sharing with Ukraine, Washington made no such decision, Ukrainian and American sources told the Kyiv...
Microsoft has released Windows 11 KB5127648 and KB5126653 cumulative updates for versions 26H2/25H2/24H2 and 23H2 to fix security vulnerabilities and bugs and add new features. [...]
The turbojet-powered drone is designed for one-way attack missions, but AEVEX says it could also carry cameras, jamming gear, and other payloads. The post Specter Jet-Powered Drone Aims At Low...
JetBrains security advisory (AV26-1032)
Progress security advisory (AV26-1031)
SAP security advisory – October 2026 monthly rollup (AV26-1030)
German authorities have detained two Turkish citizens suspected of setting fire to a Starlink ground station near Warsaw. Polish authorities believe Russian…
Ledger cryptocurrency wallets sold through a Southeast Asian reseller had an implant allowing outsiders to drain funds, the company said.
MikroTik security advisory (AV26-1029)
Local media reports three weakly protected accounts at small IT biz whose access to national register was abused
GitLab security advisory (AV26-1028)
Dell security advisory (AV26-1027)
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands. [...]
The U.K. government announced on Monday a package of measures to strengthen national defenses against growing risks from... The post UK expands AI-powered cyber defense pilots, prepares incident...
A cyberdefense researcher at the Center for Security Studies (CSS) at ETH Zurich has identified gaps in satellite... The post Space sector faces satellite cybersecurity blind spots, calls for...
Ignore the noise, sharpen your scope, and get compliance reports out faster, without scanning a single file more than you need to
SQL Injection vulnerability (CVE-2026-63316) has been found in Payload CMS software.
The Iskander-M is one of Russia's principal ballistic weapons. Since the beginning of 2026, Moscow has launched more than 500 ballistic missiles against Ukraine.
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. [...]
Several IT systems remain offline and orders face delays as TFG London becomes latest retailer to suffer cyberattack
"Ukraine has not carried out strikes on Russian oil refineries or the energy sector in general for the two days since the American president announced an energy ceasefire. But Russia did not...
Low-cost Android smartphones have been shipped with malicious software baked into the device firmware, allowing bad actors to covertly install apps, conduct ad fraud, and turn devices into...
The White House has been forced to publicly address Donald Trump’s relationship with his most loyal aide, Natalie Harp. Democrats have raised questions about Harp’s influence within the...
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user's container repositories using a personal access token (PAT). [...]
A hacking group that claimed one of the first cyber strikes in response to the U.S. and Israel attacking Iran said it commandeered the industrial control systems of a German company in what will...
A crypto security event that promised to teach attendees how to avoid scams is now the subject of scam allegations. The gathering, branded "Don't Get Played," was held as a side event during...