The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A nationwide facial recognition ID program is underway in France, in spite of a lawsuit and the data regulator's protests about lack of consent, data security …
A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin'one of the most popular applic…
Many people worry that quantum computers will be able to crack certain codes used to send secure messages. The codes in question encrypt data using trapdoor" m…
If you believe the US Federal Communications Commission, last Junes end of net neutrality-the system that required internet service providers to treat all data…
Northwestern University researchers have joined forces with BBN Technologies to demonstrate what they are calling the first truly quantum cryptographic data ne…
A buffer overflow was discovered in the handling of dBASE database files in LibreOffice, which could potentially result in the execution of arbitrary code. For…
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
It was discovered that missing validation of event data in the agent of the Puppet configuration management system could result in code execution on the Puppet…
Nicole Wootton-Cane reports: At least 320,000 school files stolen during a cyber attack on Bristol City Council’s servers have been found posted to the dark we…
mSeven Software is warning current and former mSecure password manager customers to change passwords, reset two-factor authentication, and remove passkeys foll…
Apache Arrow gives data tools a shared way to organize information.
Binance on Tuesday said the record-setting theft of $6.43 billion in assets from the world's largest cryptocurrency exchange was the culmination of a "sophisti…
An attacker broke into the update system of the cPGuard security tool on November 2 and used it to send a malicious script to customers' Linux servers. The scr…
Your team is remediating more vulnerabilities than ever, yet your breach risk has barely changed. You’re spending too much time and effort on exposures attacke…
Synology is urging customers to update the DiskStation Manager (DSM) software powering its Network Attached Storage (NAS) devices following ransomware attacks.…
An alliance of Belarusian and pro-Ukrainian hackers claimed to have taken out Russia's federal statistics agency, Rosstat, and stolen vast amounts of sensitive…
A popular Ukrainian air raid alert system was hacked over the weekend, prompting a cyber group to breach a similar Russian system in retaliation.
Changes for version 1.656 Remove lock file on end of scope Prevent dbi_profile crash (CVE-2026-108518) (Henrik Teichmann) Memory corruption via selectrow_array…
Update to Aegisub 3.5.0, fixing CVE-2026-92705: arbitrary code execution when opening crafted ASS subtitle files containing associated Automation script refere…
The DOJ’s Executive Office for U.S. Trustees said a consumer privacy ombudsman is needed to advise the court on how to regulate what data from Character.AI can…
Cryptocurrency exchange Binance is investigating a potential security breach involving up to $5.8 billion in digital assets, in what could become the largest c…
One cyber firm listed a half-dozen exploitations of the PHP2Shell bugs, and another identified a well targeted, suspected Chinese campaign that breached U.S. "…
Rowan Sterling reports: On 20 August 2026 an employee of RIZAP Inc., the Japanese fitness and health-guidance group, was pulling records out of the health-guid…
AI agents can control authenticated browsers, interact with corporate applications, and access sensitive data while appearing to act as legitimate employees. K…