Tens of thousands more victims and more ransomware groups getting in on the act
Users of two types of Fortinet hardware should take steps to limit their exposure to a now-global credential stealing campaign, U.S. federal law enforcement says.
An oil tanker caught fire in the Black Sea on Oct. 6 near the southern Russian city of Sochi. The incident was confirmed by Dmitry Plishkin, head of the nearby…
The Computer Emergency Response Team of Ukraine (CERT-UA) has identified more than 100 compromised websites that have been injected with malicious JavaScript to serve an information-stealing...
Europol is publishing two reports on the security challenges posed by quantum computing, urging organizations, policymakers and the cryptocurrency industry to begin preparing now. The reports...
TVN, one of Poland's biggest broadcasters, was in 2024 placed by the government on a list of strategic companies.
The list targets a wide range of defense industry players, from shipyards and aviation companies to electronics manufacturers, armored vehicle repair facilities, and aerospace companies.
Microsoft announced that it will add .msix and .msixbundle attachments to the list of blocked attachments in Outlook Web and the new Outlook Windows client starting next month. [...]
The Gentlemen is a financially motivated, Russian-speaking ransomware-as-a-service (RaaS) operation that split from Qilin’s affiliate programme and has, within roughly a year, become one of the...
Apple just released a system called “Reference Image.” It can verify the image is exactly as taken by an iPhone—new models only—without tying it to a specific iPhone or photographer. It can also...
A cryptomining campaign targeting exposed AI services is using PoeLLM malware to turn compromised servers into scanners and exploit launchpads. [...]
In one of Kyiv's hardest-hit districts, a heating pipeline meant to help residents weather Russian attacks this winter has instead pitted them against their own city's administration. Residents of...
"The money will be spent on drones, drone interceptors, drone ammunition, and missiles manufactured by Ukrainian entities," reads a European Commission press release.
Assuming all goes as planned, opening the two clusters could help Ukraine benefit from the European Commission's new "gradual integration" idea.
Women now make up around 16% of Poland's soldiers.
The Operational Technology Cybersecurity Coalition (OTCC) called on the U.S. Cybersecurity and Infrastructure Security Agency (CISA) to issue... The post OT Cyber Coalition calls on CISA to issue...
New research from Forescout Research – Vedere Labs has found significant post-quantum cryptography (PQC) readiness gaps across healthcare... The post Forescout finds healthcare lagging in...
Ransomware groups are increasingly targeting backup infrastructure to eliminate recovery options and increase pressure on victims to pay. Kaseya explains why organizations need isolated,...
The cybersecurity community has seen examples of autonomous agents, built inside AI labs, attacking public infrastructure. How you prepare for agentic threats is what makes the difference during...
The money would be funneled into Norway's Nansen Support Program, named after humanitarian Fridtjof Nansen, who led famine relief efforts in Ukraine in the early 1920s.
A plausible-sounding sponsorship offer could mask an attempt to compromise your Google account
A critical vulnerability (CVE-2026-21589) affecting multiple Atlassian product families, including Jira, Confluence, and Bitbucket, is being exploited in attacks that do not require authentication. [...]
Despite the “strange war” Donald Trump is waging against Iran, the purges at the Pentagon have continued unabated in recent months. Secretary of Defense Pete Hegseth has fired some generals...
SonicWall has released hotfixes to address a maximum-severity server-side request forgery (SSRF) flaw in SMA1000 series appliances. [...]
The number includes 1,690 casualties that Russian forces suffered over the past day.
A North Carolina musician was sentenced to 18 months in prison for collecting more than $10 million in royalties from Spotify, Apple Music, Amazon Music, and YouTube Music in a massive streaming...
Advantest Corporation is notifying affected individuals that a ransomware attack earlier this year exposed their personally identifiable data. [...]
'Complete security paradigm refresh' needed for the AI era
In October 2026, the Discord server protection service Double Counter suffered a data breach attributed to a vulnerability in the Metabase analytics tool. In its disclosure notice, Double Counter...
In July 2024, the Indian stock brokerage firm Angel One confirmed that data leaked online related to a breach that occurred in April 2023. The leaked data included 7.9M user records containing...