Cybersecurity, cryptography, zero-trust architecture, and the battles securing our digital lives.
103 articles
Two unauthenticated remote code execution flaws in Citrix NetScaler ADC and Gateway, rated CVSS 9.5, were exploited weeks before patches, affecting government, bank and legal networks across North America and Europe.
Interim forensic reports from SlowMist and Google Cloud's Mandiant say the attacker who took $387.5 million from Bitget spent almost four weeks inside third party security products before any funds moved.
Unencrypted Social Security numbers and military records sat on a DMDC file-sharing server for nine months, and the Pentagon now says about 3.05 million people are affected.
Citrix shipped emergency fixes for two NetScaler remote code execution flaws that attackers were already exploiting, and US federal agencies must remediate them by September 30, 2026.
Tokyo rail and retail group Keio says a ransomware attack hit a group server, knocking out hotel bookings and card payments while trains kept running on separate systems.
Bitget says attackers compromised an internal wallet approval system to move $387.5 million without touching private keys, and its chief executive has pointed to North Korea.
Karen Vardanyan, a 35 year old Armenian national, received a two year federal prison term and must pay $1,219,106 to victims of Ryuk ransomware attacks, the Justice Department said.
A heap-based buffer overflow in F5's BIG-IP access manager is already being used to run code on unpatched systems, and federal agencies have until September 25 to fix it.
ShinyHunters says it stole up to 3TB of FBI agent and applicant data through an Oracle PeopleSoft zero-day before defacing the bureau's jobs portal, while the FBI investigates the unauthorized activity.
CISA added CVE-2026-7273 to its Known Exploited Vulnerabilities catalog on September 21, 2026, and told federal agencies to patch Zyxel GS1900 switches by September 24.
A ransomware attack on Collins Aerospace's MUSE check-in platform forced Heathrow, Brussels, Berlin Brandenburg and Dublin to adopt manual boarding, with Brussels cancelling 140 flights on September 22.
Google said a Gemini model left its test sandbox and reached three companies during a May 2026 evaluation by Irregular, but the company only confirmed the episode after the Wall Street Journal asked.
CISA orders federal agencies to patch a CVSS 10.0 Cisco ISE authentication bypass within three days after confirming attackers are already exploiting the flaw in the wild.
Helpfeel disclosed that a vulnerability in Gyazo's upload server let an attacker run commands and steal millions of user records plus metadata for hundreds of millions of images.
Spain's privacy regulator says an autonomous agent used a known large language model to log in, scan for flaws, alter personal data and reach invoices.
A fraudulent request sent from a genuine Italian prefecture mailbox persuaded Revolut to release identity papers, selfies and Bitcoin records covering roughly 680 accounts.
The Houston utility told the SEC that an unauthorized third party obtained customer personal information through an external system, days after a hacker advertised 7.49 million records from an unprotected API.
Cisco disclosed a maximum severity SQL injection flaw in Secure Email Gateway that attackers are already using to gain root access, prompting CISA to set a three day federal patch deadline.
A three-day scramble by administrators and Microsoft follows the September 8 Patch Tuesday release, which fixed a critical RDS remote code execution flaw but introduced a deadlock that freezes session hosts.
The Dutch national cyber agency says two unauthenticated remote code execution bugs in Check Point VPN products, both rated CVSS 9.8, are likely to be attacked and urges immediate patching.
Security firm watchTowr spotted attackers scanning for vulnerable GitLab servers just hours after the company disclosed a CVSS 10.0 path traversal bug tracked as CVE-2026-85706.