The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
ConnectWise on Saturday said it has disabled seven ConnectWise application identities as it continues its investigation into an incident in which unknown threa…
Cybersecurity researchers have disclosed details of an advanced persistent threat (APT) spear-phishing campaign that has targeted individuals affiliated with T…
Threat actors are exploiting a critical command execution flaw, now tracked as CVE-2026-110447, in the Collabora Online - Built-in CODE Server app (richdocumen…
A flaw in SAP's Cloud SDK for Python can send an application's OAuth2 client credentials to a server an attacker controls, SAP said in a security advisory on O…
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially dis…
Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix …
Three research teams broke into Google's Pixel 10 on October 8 at Pwn2Own Ireland, a hacking contest in Cork whose rules require every target to be fully patch…
Hackers obtained unauthorized HTTPS certificates for several Google domains and hijacked domains in the country-code top-level domains (ccTLDs) for Ghana, Amer…
Google has now suspended submissions to its Open Source Software Vulnerability Rewards Program (OSS VRP) after being flooded by AI-generated reports.…
Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini 4 Argon, that it said is being rolled out to a set of trusted cybe…
A September 23 advisory describes a flaw in the Python SDK used with MCP Toolbox: a shared cache could send a Google ID token to a service it was not meant for.
Google's Gemini model has become the latest artificial intelligence (AI) system to access the internet and break into other companies during a cybersecurity ev…
Most administrators do not think about BIND, browser engines, or cloud kernels until one of them fails.
Cybersecurity researchers have disclosed details of a mass-scanning campaign that has targeted Vite deployments siphon sensitive data.The first is an automated…
Microsoft has disclosed details of two campaigns in which threat actors are abusing third-party email delivery infrastructure to blast financial fraud scam mes…
Austin, Texas / USA, 9th September 2026, CyberNewswireSpyCloud 2026 Identity Threat Report Finds Non-Human Identities Are Now the Leading Path into the Enterpr…
Chrome release notes can be a blur of version numbers. This one deserves a closer look. In the Linux build published on September 3, 2026, Google fixed CVE-202…
The Fedora 43 update for NextCloud version 34.0.3 addresses multiple security vulnerabilities including XSS and prototype pollution, enhancing the file sync an…
Fedora 44 has released an update for NextCloud version 34.0.3, addressing multiple security vulnerabilities including cross-site scripting and prototype pollut…
Cybersecurity researchers have disclosed details of a remote Spectre attack against Cloudflare Workers that leaked a JSON Web Token (JWT) from a co-located Wor…
A security update for google-osconfig-agent addresses two vulnerabilities in SUSE Linux Micro 6.1, prompting users to install patches to mitigate risks of priv…
A security update for google-guest-agent addressing two vulnerabilities in SUSE Linux Micro 6.1 is now available, with important fixes for privilege escalation…
A security update for google-guest-agent addresses two vulnerabilities in SUSE Linux Micro 6.0, facilitating potential privilege escalation and an infinite loo…
A security update for google-osconfig-agent addresses CVE-2026-56852, fixing an improper handling of invalid UTF-8 bytes that could cause an infinite loop in a…