Cybersecurity

Internet Engineering Task Force ietf.org · 11 May 2026

IETF Snapshot 2025

Want to catch up on IETF activity in 2025? How many RFCs were published? How many Internet-Drafts were submitted? How many Working Groups were chartered or concluded? The latest edition of the IETF...

HM Government Communications Centre gov.uk · 11 May 2026

Dr Simon Fabri appointed Chief Executive of HMGCC

HMGCC has today announced the appointment of Dr Simon Fabri as its new Chief Executive.

Bhutan Computer Incident Response Team btcirt.bt · 11 May 2026

Apache HTTP/2 Flaw: 20260507001

Critical “mod_http2” Denial of Service and Remote Code Execution Vulnerability in Apache HTTP Server Severity CRITICAL (CVSS ~9.8–10.0, depending on […] The post Apache HTTP/2 Flaw: 20260507001 fir...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 11 May 2026

Cyberkriminalität im Alltag: Jede zehnte Person in Deutschland allein im Vorjahr betroffen

Viele Menschen informieren sich über ihre persönliche IT-Sicherheit erst im Ernstfall – so das Ergebnis des Cybersicherheitsmonitors 2026. Die repräsentative Befragung des BSI und des ProPK beleuch...

Nasjonal sikkerhetsmyndighet (NSM / NCSC Norway) nsm.no · 8 May 2026

Ny alvorlig sårbarhet i Linux-kjernen

NSM varslet 30. april på en alvorlig sårbarhet i Linux-kjernen med betegnelse CVE-2026-31431, døpt Copy Fail. Det er nå blitt publisert en ny, lignende sårbarhet i Linux-kjernen som blir omtalt som...

CERT.at cert.at · 8 May 2026

Lokale Privilegieneskalation im Linux-Kernel ("Dirty Frag" und "Copy Fail 2") - PoCs verfügbar, kein Patch

Am 7. Mai 2026 wurden zwei neue Schwachstellen im Linux-Kernel öffentlich gemacht, die unter den Namen „Dirty Frag“ und „Copy Fail 2: Electric Boogaloo“ bekannt sind. Beide Schwachstellen ermöglich...

Government Information Security Office (URSIV, Slovenia) gov.si · 8 May 2026

Povabilo k oddaji ponudbe za raziskovalno študijo o sporočilih s področja informacijske varnosti

Urad Vlade Republike Slovenije za informacijsko varnost objavlja povabilo k oddaji ponudbe za izvedbo evidenčnega naročila "Psihološki dejavniki razumevanja in upoštevanja sporočil organov s področ...

Information-technology Promotion Agency (IPA) ipa.go.jp · 7 May 2026

Palo Alto Networks製PAN-OSの脆弱性対策について(CVE-2026-0300)

Information System Authority (RIA) ria.ee · 7 May 2026

April in cyberspace: disruptions to digital services and a surge in phishing emails

In April, the Information System Authority (RIA) recorded 1,138 cyber incidents with impact, some of which were related to the functioning of everyday digital services. At the same time, the number...

Information-technology Promotion Agency (IPA) ipa.go.jp · 6 May 2026

Linuxの脆弱性対策について(CVE-2026-31431、Copy Fail)

CERT-EU cert.europa.eu · 6 May 2026

2026-006: Critical Vulnerability in PAN-OS

On 6 May 2026, Palo Alto published a security advisory addressing a critical vulnerability affecting PAN-OS. This vulnerability allows an unauthenticated attacker to execute arbitrary code with roo...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 4 May 2026

CyberGovSecure gestartet: Bund stärkt Cybersicherheit koordiniert und ressortübergreifend

Mit dem Kick-off des Programm CyberGovSecure hat die Bundesverwaltung den operativen Start für eine koordinierte Stärkung der Cybersicherheit vollzogen. Unter der Koordination der CISO Bund, des BM...

Canadian Security Intelligence Service canada.ca · 1 May 2026

Canadian Security Intelligence Service releases 2025 public report

Today, the Canadian Security Intelligence Service (CSIS) released its 2025 public report. The report reflects the complexity of Canada’s current national security environment. It highlights the imp...

Building Digital UK gov.uk · 1 May 2026

Project Gigabit National Rolling Open Market Review May 2026

A National Rolling Open Market Review request for information for all suppliers to submit information about their existing and planned build at premises level over the next 3 year period across the...

National Security Agency nsa.gov · 1 May 2026

NSA joins the ASD’s ACSC and Others to Release Guidance on Agentic Artificial Intelligence Systems

FORT MEADE, Md.  – Today, the National Security Agency (NSA) joins the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and others to release the Cybersecurity In...

Government Information Security Office (URSIV, Slovenia) gov.si · 30 Apr 2026

Povabilo k oddaji ponudbe za analizo varnostne kulture zavezancev po Zakonu o informacijski varnosti

Urad Vlade Republike Slovenije za informacijsko varnost objavlja povabilo k oddaji ponudbe za izvedbo evidenčnega naročila »Analiza varnostne kulture zavezancev ZInfV-1«.

CERT-EU cert.europa.eu · 30 Apr 2026

2026-005: High Vulnerability in the Linux Kernel ("Copy Fail")

On 29 April 2026, a high local privilege escalation vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named "Copy Fail", was publicly disclosed. The vulnerability affects every mains...

Nasjonal sikkerhetsmyndighet (NSM / NCSC Norway) nsm.no · 30 Apr 2026

Alvorlig sårbarhet i Linux-kjernen

Alle Linux-distribusjoner med kjerne kompilert etter 2017 er vurdert som sårbare.

CERT.at cert.at · 30 Apr 2026

Copy Fail Update #1: Kritische Linux-Kernel-Schwachstelle ermöglicht lokale Root-Rechte

Die Schwachstelle steckt im Linux-Kernel und beruht auf einem simplen, aber schweren Logikfehler. Benutzer:innen können dadurch mit wenig Daten gezielt in eigentlich geschützte Speicherbereiche sch...

Internet Engineering Task Force ietf.org · 29 Apr 2026

IETF 125 post-meeting survey

The IETF 125 Shenzhen meeting was held 14-20 March 2026 and the results of the post-meeting survey are now available.

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 29 Apr 2026

Cybersicherheit in Bund und Ländern: BSI und Brandenburg vereinbaren Kooperation

Das BSI und das Land Brandenburg intensivieren ihre Zusammenarbeit im Bereich Cybersicherheit. Dafür unterzeichneten BSI-Präsidentin Claudia Plattner und Brandenburgs Digitalstaatssekretär Ernst Bü...

Bitdefender bitdefender.com · 29 Apr 2026

Operation Road Trap: Fake toll and parking texts are spreading worldwide

A new mass smishing campaign uncovered by Bitdefender Labs shows that scammers are sending tens of thousands of fraudulent text messages to mobile users across 12 countries, impersonating transport...

eu-LISA eulisa.europa.eu · 29 Apr 2026

Strengthening sustainable digital infrastructure: eu-LISA report on EU data centres

eu-LISA has published a new Research and Technology Monitoring report on the state of play of energy efficiency in data centres, offering an accessible overview of how digital infrastructure across...

GreyNoise greynoise.io · 29 Apr 2026

Project Swarm: Join the Collective. Defend the Edge

Today, we're launching Project Swarm — a research initiative that opens the GreyNoise deception platform to the global security community. Project Swarm transforms GreyNoise from a proprietary sens...

AIVD aivd.nl · 28 Apr 2026

Bekijk de uitslag van de AIVD kerstpuzzel en de juniorkerstpuzzel 2025

De puzzelmakers zijn klaar met nakijken: de uitslagen van de AIVD kerstpuzzel en de juniorkerstpuzzel 2025 zijn bekend. Was jij dit jaar de slimste? Natuurlijk publiceren we ook de oplossingen.

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 27 Apr 2026

C3A: BSI veröffentlicht Souveränitätskriterien für Cloud-Dienste

Mit den Criteria enabling Cloud Computing Autonomy (C3A) hat das Bundesamt für Sicherheit in der Informationstechnik (BSI) einen richtungsweisenden Handlungsrahmen vorgelegt, der die Souveränitätse...

Information-technology Promotion Agency (IPA) ipa.go.jp · 26 Apr 2026

更新：Cisco Secure Firewall ASAおよびCisco Secure FTDの脆弱性について (CVE-2025-20333等)

Nasjonal sikkerhetsmyndighet (NSM / NCSC Norway) nsm.no · 23 Apr 2026

Persistent skadevare i Cisco Secure Firewall ASA og Secure FTD

Cisco publiserte 23. april 2026 varsel om en persistent bakdør i Cisco Firepower eXtensible Operating System (FXOS) for Cisco Secure Firewall ASA og Cisco Secure FTD .

National Data Guardian gov.uk · 23 Apr 2026

National Data Guardian statement on UK Biobank data advertised for sale in China

Comment on the news that UK Biobank participants' health data has been advertised for sale on Alibaba e-commerce platforms in China.

National Security Agency nsa.gov · 23 Apr 2026

NSA and Others Release Joint Guidance Addressing Multiple China-Nexus Threat Actors Using External Covert Networks to Facilitate Cyber Activity at Scale

FORT MEADE, Md. (April 23, 2026) — The National Security Agency (NSA) joined the United Kingdom’s National Cyber Security Centre, the Australian Signals Directorate’s Australian Cyber Security Cent...

AIVD aivd.nl · 23 Apr 2026

AIVD: wereld vol conflict en botsende belangen

Ook in 2025 werd Nederland geconfronteerd met een veelvoud aan dreigingen tegen de nationale veiligheid en de democratische rechtsorde. De AIVD doet zijn werk in een wereld vol conflict en botsende...

Government Information Security Office (URSIV, Slovenia) gov.si · 23 Apr 2026

Obvestilo o vplivih modelov umetne inteligence na kibernetsko varnost: primer modela Mythos

Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) spremlja razvoj naprednih modelov umetne inteligence (UI), ki imajo vse večji vpliv na področje kibernetske varnosti, predvsem v smis...

FIRST (Forum of Incident Response and Security Teams) first.org · 23 Apr 2026

FIRST Concludes Sold-Out 2026 Cyber Threat Intelligence Conference in Munich

Global practitioners gathered to advance AI-driven CTI, detection engineering, and threat intelligence standards

Federal Office for Cyber Security (BACS/NCSC) admin.ch · 23 Apr 2026

‘Stay safe online and offline’ – Raising awareness at the 2026 BEA spring fair

The National Cyber Security Centre (NCSC) will be hosting an interactive exhibition at the BEA spring fair in Bern between 24 April and 3 May to raise public awareness of cybersecurity. Working alo...

Information System Authority (RIA) ria.ee · 22 Apr 2026

RIA: Digital signatures may stop working in systems that have not been updated by the end of April

The European Commission is carrying out a technical update of the trusted list, which involves a transition from the current version 5 to the new version 6. The Information System Authority (RIA) w...

Information-technology Promotion Agency (IPA) ipa.go.jp · 21 Apr 2026

Oracle Java の脆弱性対策について(2026年4月)

Government Information Security Office (URSIV, Slovenia) gov.si · 20 Apr 2026

EU na Cipru o kibernetskem certificiranju in Aktu o kibernetski odpornosti

Dr. Tilen Gorenšek se je kot predstavnik Urada Vlade Republike Slovenije za informacijsko varnost (URSIV) med 14. in 17. aprilom 2026 na Cipru udeležil srečanj na ravni EU, posvečenih nadaljnjemu r...

Government Information Security Office (URSIV, Slovenia) gov.si · 20 Apr 2026

Objavljeno gradivo o prehodu v post-kvantno kriptografijo

Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) je pripravil gradivo Varna digitalna prihodnost v dobi kvantnih računalnikov – prehod v post-kvantno kriptografijo (PQC), ki obravnav...

GreyNoise greynoise.io · 20 Apr 2026

The Internet Changes Before the Advisory Drops

Before Cisco disclosed a CVSS 10.0 zero-day, GreyNoise sensors had already observed eight surges of targeting activity compressing from 39 days to 2 days. A new study finds this pattern repeated ac...

Communications Security Establishment canada.ca · 17 Apr 2026

Cyber Centre launches new initiative to help Canada’s critical infrastructure prepare for severe cyber threats

The Canadian Centre for Cyber Security (the Cyber Centre) has launched the Critical Infrastructure Resilience and Escalated Threat Navigation (CIREN) initiative to help critical infrastructure (CI)...

Bhutan Computer Incident Response Team btcirt.bt · 17 Apr 2026

Fake Telegram Channel Alert

Fake Telegram Channel Alert The Bhutan Computer Incident Response Team (BtCIRT), Cybersecurity Division, GovTech Agency, earnestly urges the general public […] The post Fake Telegram Channel Alert ...

FIRST (Forum of Incident Response and Security Teams) first.org · 16 Apr 2026

FIRST Wraps CVE/VulnCon 2026 with 500+ Attendees, New Product Launches, and Key Vulnerability Management Milestones

Four-day summit in Scottsdale draws global security leaders to advance CVE quality, AI security, and coordinated disclosure.

Information System Authority (RIA) ria.ee · 16 Apr 2026

The Cyber Accelerator invites applications from cyber security startups with a focus on combating cybercrime and on research-based solutions

The Cyber Accelerator, organised in collaboration between the Information System Authority (RIA) and the Tehnopol Startup Incubator, is inviting applications from startups operating in the field of...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 16 Apr 2026

KI, Quantencomputer, Nachwuchsförderung: Das war der 21. Deutsche IT-Sicherheitskongress

Auf dem 21. Deutschen IT-Sicherheitskongress haben Expertinnen und Experten den zunehmenden Bedarf an Sicherheitskonzepten für den Einsatz Künstlicher Intelligenz (KI) diskutiert. Im Rahmen des BSI...

NCTV (National Coordinator for Security and Counterterrorism) nctv.nl · 15 Apr 2026

Tweede Kamer stemt in met wetsvoorstellen Cyberbeveiligingswet en Wet weerbaarheid kritieke entiteiten

De Tweede Kamer heeft woensdag 15 april de wetsvoorstellen voor de Cyberbeveiligingswet en de Wet weerbaarheid kritieke entiteiten aangenomen. Daarmee zet Nederland een belangrijke stap in het vers...

CERT-UA cert.gov.ua · 15 Apr 2026

Лікарні, органи місцевого самоврядування та оператори FPV - у фокусі кластера кіберзагроз UAC-0247 (UAC-0244)

CERT-UA протягом березня-квітня 2026 року зафіксовано інтенсифікацію кібератак у відношенні органів місцевого самоврядування та, насамперед, комунальних закладів охорони здоров'я, зокрема клінічних...

Information-technology Promotion Agency (IPA) ipa.go.jp · 14 Apr 2026

Microsoft 製品の脆弱性対策について(2026年4月)

Information-technology Promotion Agency (IPA) ipa.go.jp · 14 Apr 2026

Adobe Acrobat および Reader の脆弱性対策について(2026年4月)_2

NCTV (National Coordinator for Security and Counterterrorism) nctv.nl · 13 Apr 2026

Steeds meer Nederlanders bereiden zich door Denk vooruit voor op noodsituaties

Het aantal Nederlanders met een noodpakket is gestegen van 30% naar 44% van de bevolking. Het aantal mensen met een noodplan is verdubbeld en bijna de helft van alle Nederlanders praat met medebewo...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 13 Apr 2026

KI-Betrug im Netz: Nur ein Fünftel überprüft die Quelle

Fast die Hälfte der Internetnutzerinnen und -nutzer in Deutschland fühlt sich zwar in der Lage, KI-generierte Inhalte zu erkennen. Tatsächlich schaut jedoch kaum jemand genauer hin: Nur eine Minder...