UPDATED
CISA Alerts · · Medium severity
View CSAF Summary Successful exploitation of these vulnerabilities could crash the Windows kernel. The following versions of HMS Networks PEAK-System PCAN Windows drivers are affected: PEAK-System Device Driver Setup <=5.1.2.1151...
Help Net Security · · Critical severity
An unknown number of AOMEI Backupper users had their computers infected with a backdoor through an unusually stealthy supply chain attack, security researchers discovered. Between April and July 2026, attackers repeatedly altered...
The Hacker News · · Medium severity
A Chinese-speaking criminal pointed autonomous AI agents at company websites and let them break in with almost no help, and a security researcher watched it happen because the operators left their control panels open on the internet....
Hacker News · · Medium severity
TNW · · Medium severity
A cyberattack that once might have taken weeks or months to unfold can now go from initial access to a complete system takeover in minutes. That was the lesson CJ Moses, CISO of Amazon, shared with Shahar Peled. Peled is CEO and...
AlienVault OTX · · Critical severity
A DLL side-loading vulnerability in Software Center version 3.5.8.7 is being actively exploited by attackers. The threat actors distribute a genuine, digitally signed copy of the application alongside malicious DLL files through...
AlienVault OTX · · Medium severity
Russian espionage group Swallowtail targeted organizations across two NATO member states, including a law enforcement agency, naval shipbuilder, and military aircraft engine manufacturer. During a two-month intrusion at the naval...
AlienVault OTX · · Medium severity
In early October 2026, analysts investigated a compromise of a Citrix NetScaler ADC appliance running an affected 14.1 build. Attackers chained two vulnerabilities: CVE-2026-88771 (pre-authentication log-poisoning/RCE) and...
AlienVault OTX · · Medium severity
A critical authentication bypass vulnerability in BeyondTrust Remote Support platform allows unauthenticated remote attackers to perform file operations without user interaction. Versions 26.2.3 and earlier are affected. BeyondTrust...
Checkpoint Research · · Medium severity
Key Findings Antidetect browsers obscure the digital identity of their users, enabling a single operator to silently manage thousands of isolated accounts across multiple platforms (including Facebook, TikTok, Instagram, and YouTube),...
Help Net Security · · Medium severity
Security patches are turning into roadmaps for attackers, with a growing share of fixes later found incomplete or open to bypass. Oren Yomtov, a security researcher at Terra Security, began tracking broken fixes after the team kept...
The Record by Recorded Future · · Medium severity
In an email, the Hong Kong-registered company confirmed to Recorded Future News that hackers repeatedly altered configuration files on its update servers between April and July, redirecting the software to download malware for minutes...
IT Pro · · Medium severity
Nicole Kobie first started writing for ITPro in 2007. As a freelance journalist covering technology and business, Nicole's work includes bylines in New Scientist, Wired, PC Pro and many more. Nicole the author of a book about the...
BleepingComputer · · Medium severity
Department of Homeland Security (DHS) is ordering federal civilian agencies to stop using DeepSeek products and remove them from government systems.
IT Security Guru · · Medium severity
The best cybersecurity thought leadership agencies help organisations turn expert insight into credible executive content, original research and influential industry commentary. For technical, practitioner-led thought leadership: Bora...
SecurityWeek · · Medium severity
Across multiple short compromise windows, users were served a downloader for the ShinyRoad modular backdoor framework. The post AOMEI Backupper Compromised in Short-Burst Supply Chain Campaign appeared first on SecurityWeek .
BleepingComputer · · Medium severity
CJIS v6.1 requires agencies to maintain strong authentication, account security, and audit controls while demonstrating ongoing compliance. Specops outlines five practical priorities covering MFA, account management, passwords, logging,...
The Register · · Critical severity
A test account protected by "Password1" helped an intruder steal personal data relating to 3,300 people, mostly children, in a ransomware attack that has drawn regulatory rebukes for two Welsh organizations. The Information Commission's...
SecurityWeek · · Medium severity
The company has restored many websites and apps in Europe and expects e-commerce brands in the US to be restored in days. The post Ahold Delhaize Restoring Services Disrupted by Cyberattack appeared first on SecurityWeek .
BleepingComputer · · Medium severity
A Nigerian national was sentenced to eight years in prison for his involvement in a series of spearphishing attacks targeting US tax preparation businesses since 2019.
Malwarebytes Labs · · Medium severity
As Android Central reports , users have received unexpected emails telling them their phone number has been verified for secondary Google accounts. Like me and many others, you may have one Google account for everyday use, another for...
IT Pro · · Medium severity
Jane is managing editor at ITPro and ChannelPro. She started out with the brands as a staff writer specializing in cloud computing before going on to become senior writer and reports editor, managing the content and creation of ITPro’s...
SecurityWeek · · Medium severity
At least three threat actors have been abusing Cairn for persistent access and financial theft. The post AI Platform Cairn Abused to Hack Over 100 Organizations appeared first on SecurityWeek .
The Register · · Medium severity
Bullhorn is the latest tech giant finding itself on the wrong end of a cyberattack, forcing the recruitment software provider to shut down its platform while it investigates. The US-based company, which serves more than 10,000 customers...
SecurityWeek · · Medium severity
Abdulrahman Alfozan’s wife and young son also left the country the day after the 35-year-old Saudi national’s arrest. The post Ex-OpenAI Worker Accused of Bugging Conference Room Planned to Fly to Saudi Arabia, Prosecutors Say appeared...
Help Net Security · · Medium severity
Siemens has confirmed the active exploitation of CVE-2026-110936, a DLL side-loading vulnerability in Siemens Software Center, the company’s tool for downloading, installing and managing its software. Siemens first published its...
HackRead · · Medium severity
Ocean Security found a phishing campaign, dubbed Phantom Preview, that abused legitimate Frame.io notifications and hidden PDF links…
The Hacker News · · Medium severity
The Russia-linked state-sponsored threat actor tracked as APT28 (aka BlueDelta, Fancy Bear, and Forest Blizzard) has been attributed to attacks targeting two member states of the North Atlantic Treaty Organization (NATO). The Symantec...
Innovation Village | Technology, Product Reviews, Business · · Medium severity
The days of treating a new Windows PC like a fragile, unprotected vault are long gone. In the early eras of computing, navigating the internet without third-party antivirus software was incredibly risky. Malware, trojans, and...
TechRadar · · Medium severity
Benedict is a Senior Security Writer at TechRadar Pro, where he has specialized in covering the intersection of geopolitics, cyber-warfare, and business security. Benedict provides detailed analysis on state-sponsored threat actors, APT...
BleepingComputer · · Medium severity
French cloud and hosting provider OVHcloud is warning users that attackers compromised its open-source command-line interface (CLI) tool to distribute information-stealing malware.
· · Medium severity
Internal documents show Legal Aid SA ordered password resets and mandatory cyber security training after a phishing attack, even as it denies any successful breach.
BleepingComputer · · Medium severity
Ahold Delhaize, one of the world's largest food retail chains, confirmed that last week's cyberattack disrupted services at stores across Europe and the United States.
Schneier on Security · · Critical severity
Justin.sh is reporting on a confidential Cellebrite document that has been leaked to him: Cellebrite calls it Advanced Unlocks (AU from here on), not to be confused with the “advanced unlocking services” they’ve marketed for years. A...
HackRead · · Medium severity
Japanese police arrested a Chinese couple accused of hiding a computer in a Kobe hotel to send phishing emails and using stolen credit card details for purchases.
Infosecurity Magazine · · Medium severity
Siemens identified the activity to be from the Romulus multi-platform ClickFix campaign, with Siemens Software Center users urged to apply an update
Fast Company Tech · · Medium severity
Over the past few months, it’s become clear that modern AI systems are quite adept at discovering software vulnerabilities and finding ways around cybersecurity defenses. Unintended real-world breaches executed by models from leading AI...
Malwarebytes Labs · · Medium severity
Meta says it has resolved an issue after some Ray-Ban Meta owners reported that their glasses recorded conversations without the “Hey Meta” wake phrase. Users reported finding recordings and transcripts of conversations they did not...
Help Net Security · · Medium severity
The US Army is looking for AI agents that can slip into an adversary’s network, find their target, copy themselves onto nearby tablets and computers, and then erase themselves before anyone notices. Over the past few months, AI agents...
Hacker News · · Medium severity
Updated's live feed refreshes every 5 minutes with breach alerts, bookmarks, a personalised feed and a Monday digest.
Join Updated free