Cybersecurity

eu-LISA eulisa.europa.eu · 25 May 2026

eu-LISA publishes 2025 Schengen Information System annual statistics

The Schengen Information System (SIS), Europe’s largest and most widely used information-sharing system for security and border management, continued to play a central role in supporting operationa...

Government Information Security Office (URSIV, Slovenia) gov.si · 25 May 2026

Pogosta vprašanja o načrtu Evropske unije za postkvantno kriptografijo

Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) je pripravil slovensko različico dokumenta Načrt Evropske unije za postkvantno kriptografijo – pogosta vprašanja, ki se navezuje na e...

GreyNoise greynoise.io · 22 May 2026

The Coverage Gap: Why Your Blocklist Is Missing 119,000 Malicious IPs Today

GreyNoise compared 119,842 malicious IPs against 11 major threat feeds. The average coverage: just 2%, exposing the limits of static blocklists.

CERT-UA cert.gov.ua · 21 May 2026

Оновлений інструментарій UAC-0057: OYSTERFRESH, OYSTERSHUCK та OYSTERBLUES

Починаючи з весни 2026 року, CERT-UA фіксує численні випадки розсилання електронних листів серед державних організацій із використанням скомпрометованих облікових записів, зокрема із використанням ...

GreyNoise greynoise.io · 21 May 2026

A New SonicWall Scanning Spike Echoes the Pattern That Preceded CVE-2026-0400

A new SonicWall scanning surge mirrors the pattern that preceded CVE-2026-0400. GreyNoise details the activity and what defenders should watch.

CERT.at cert.at · 20 May 2026

Kritische Sicherheitslücke in Drupal Core - Updates verfügbar

In Drupal Core existiert eine SQL-Injection-Schwachstelle in der Datenbank-Abstraktions-API. Speziell gestaltete Anfragen können zu beliebigen SQL-Injections führen. Die Schwachstelle ist ausschlie...

NÚKIB (National Cyber and Information Security Agency) nukib.gov.cz · 20 May 2026

Upozornění na smishingovou kampaň, ve které se útočníci vydávají za Policii České republiky

Národní úřad pro kybernetickou a informační bezpečnost upozorňuje na smishingovou kampaň, v rámci které se útočníci prostřednictvím SMS zpráv vydávají za Policii České republiky s cílem získat plat...

National Security Agency nsa.gov · 20 May 2026

NSA Releases Security Design Considerations for AI-Driven Automation Leveraging the Model Context Protocol

FORT MEADE, Md. (May 20, 2026) — The National Security Agency’s Artificial Intelligence Security Center (AISC) is releasing a Cybersecurity Information Sheet (CSI), “Model Context Protocol (MCP): S...

Government Office for Technology Transfer gov.uk · 20 May 2026

HM Government licensing cyber security tech for a global market

SilentGlass is a plug-and-play cyber security device developed by NCSC and commercialised with support from GOTT, now licensed to a UK firm for global use.

Federal Office for Cyber Security (BACS/NCSC) admin.ch · 20 May 2026

Progress in strengthening cybersecurity

Switzerland is making progress in strengthening cybersecurity. The latest report on the implementation of the National Cyberstrategy (NCS) documents the status of work in 2025 and shows that projec...

Bitdefender bitdefender.com · 19 May 2026

Microsoft’s MSHTA Legacy Tool Still Powers Malware Campaigns on Windows

Bitdefender security researchers have discovered that attackers continue to exploit Microsoft HTML Application Host (MSHTA), a legacy utility available by default on Windows systems that can execut...

CERT Bulgaria (GovCERT) govcert.bg · 18 May 2026

Продължаваща phishing кампания, представяща се за държавни институции

CERT-BG получава сигнали за продължаваща измамна кампания чрез SMS, при която престъпници се представят за държавни институции, като МВР, КАТ, Министерство на транспорта и др. Как изглежда измамата...

Cyber & Specialist Operations Command gov.uk · 18 May 2026

Commander CSOC Commendations May 2026

On Friday 15 May, personnel and teams from across Cyber & Specialist Operations Command (CSOC) came together at Admiralty House to receive their Commander’s Commendation from General Sir Rob Ma...

European Cybersecurity Competence Centre cybersecurity-centre.europa.eu · 18 May 2026

ECCC seeks cybersecurity experts for major funding programmes

The European Cybersecurity Competence Centre (ECCC) is looking for cybersecurity professionals to join the pool of independent experts supporting two of the European Union’s largest funding program...

Slovenian Nuclear Safety Administration gov.si · 15 May 2026

Slovenske izkušnje na mednarodni konferenci o kibernetski varnosti v jedrskem sektorju

Predstavniki Uprave za jedrsko varnost so med 11. in 15. majem 2026 na Dunaju predstavili slovenske prakse in izkušnje na področju kibernetske varnosti jedrskih objektov ter sodelovali v razpravah ...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 13 May 2026

Cybersicherheit in Bund und Ländern: BSI und Mecklenburg-Vorpommern schließen Kooperation

Das BSI und das Land Mecklenburg-Vorpommern arbeiten im Bereich der Cybersicherheit künftig enger zusammen. Ziel ist, die Zusammenarbeit zwischen Bund und Land mit Blick auf Cybersicherheit zu stär...

Nasjonal sikkerhetsmyndighet (NSM / NCSC Norway) nsm.no · 12 May 2026

Microsoft patchetirsdag mai

30 sårbarheter vurdert som kritiske av Microsoft. Detaljer om disse sårbarhetene kommer frem  Microsofts månedlige sikkerhetsoppdatering. 

Information-technology Promotion Agency (IPA) ipa.go.jp · 12 May 2026

Microsoft 製品の脆弱性対策について(2026年5月)

Information-technology Promotion Agency (IPA) ipa.go.jp · 12 May 2026

「GUARDIANWALL MailSuite」におけるスタックベースのバッファオーバーフローの脆弱性について（JVN#35567473）

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 12 May 2026

BSI veröffentlicht G7-Richtlinie zu Software Bill of Materials for AI

Unter Federführung des BSI und der italienischen Cybersicherheitsbehörde ACN wurde von KI-Expertinnen und Experten der G7-Cybersicherheitsbehörden und der EU-Kommission eine Richtlinie mit Minimala...

Smart Africa smartafrica.org · 11 May 2026

ANCA – Africa’s Gateway to Cybersecurity

How Africa’s governments are converging on a single front door for cyber cooperation Marrakech, Morocco — GITEX Africa 2026 At a high-level partners’ roundtable convened on the margins of GITEX Mar...

ŠÚKL (Štátny ústav pre kontrolu liečiv) sukl.sk · 11 May 2026

Obmedzený prístup na www.sukl.sk zo zahraničia

Z dôvodu ochrany pred kybernetickými útokmi a pre zabezpečenie stability servera bol dočasne obmedzený na web www.sukl.sk zo zahraničných IP adries.

Bhutan Computer Incident Response Team btcirt.bt · 11 May 2026

Apache HTTP/2 Flaw: 20260507001

Critical “mod_http2” Denial of Service and Remote Code Execution Vulnerability in Apache HTTP Server Severity CRITICAL (CVSS ~9.8–10.0, depending on […] The post Apache HTTP/2 Flaw: 20260507001 fir...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 11 May 2026

Cyberkriminalität im Alltag: Jede zehnte Person in Deutschland allein im Vorjahr betroffen

Viele Menschen informieren sich über ihre persönliche IT-Sicherheit erst im Ernstfall – so das Ergebnis des Cybersicherheitsmonitors 2026. Die repräsentative Befragung des BSI und des ProPK beleuch...

Nasjonal sikkerhetsmyndighet (NSM / NCSC Norway) nsm.no · 8 May 2026

Ny alvorlig sårbarhet i Linux-kjernen

NSM varslet 30. april på en alvorlig sårbarhet i Linux-kjernen med betegnelse CVE-2026-31431, døpt Copy Fail. Det er nå blitt publisert en ny, lignende sårbarhet i Linux-kjernen som blir omtalt som...

CERT.at cert.at · 8 May 2026

Lokale Privilegieneskalation im Linux-Kernel ("Dirty Frag" und "Copy Fail 2") - PoCs verfügbar, kein Patch

Am 7. Mai 2026 wurden zwei neue Schwachstellen im Linux-Kernel öffentlich gemacht, die unter den Namen „Dirty Frag“ und „Copy Fail 2: Electric Boogaloo“ bekannt sind. Beide Schwachstellen ermöglich...

Government Information Security Office (URSIV, Slovenia) gov.si · 8 May 2026

Povabilo k oddaji ponudbe za raziskovalno študijo o sporočilih s področja informacijske varnosti

Urad Vlade Republike Slovenije za informacijsko varnost objavlja povabilo k oddaji ponudbe za izvedbo evidenčnega naročila "Psihološki dejavniki razumevanja in upoštevanja sporočil organov s področ...

Information-technology Promotion Agency (IPA) ipa.go.jp · 7 May 2026

Palo Alto Networks製PAN-OSの脆弱性対策について(CVE-2026-0300)

Information System Authority (RIA) ria.ee · 7 May 2026

April in cyberspace: disruptions to digital services and a surge in phishing emails

In April, the Information System Authority (RIA) recorded 1,138 cyber incidents with impact, some of which were related to the functioning of everyday digital services. At the same time, the number...

Information-technology Promotion Agency (IPA) ipa.go.jp · 6 May 2026

Linuxの脆弱性対策について(CVE-2026-31431、Copy Fail)

CERT-EU cert.europa.eu · 6 May 2026

2026-006: Critical Vulnerability in PAN-OS

On 6 May 2026, Palo Alto published a security advisory addressing a critical vulnerability affecting PAN-OS. This vulnerability allows an unauthenticated attacker to execute arbitrary code with roo...

Civil Aviation Authority gov.uk · 5 May 2026

Nearly £50 million government backing to power up drone and flying taxi tech and crack down on illegal drones

Funding will help develop a numberplate ID system for drones, helping police better protect UK skies and prosecute illegal users.

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 4 May 2026

CyberGovSecure gestartet: Bund stärkt Cybersicherheit koordiniert und ressortübergreifend

Mit dem Kick-off des Programm CyberGovSecure hat die Bundesverwaltung den operativen Start für eine koordinierte Stärkung der Cybersicherheit vollzogen. Unter der Koordination der CISO Bund, des BM...

Canadian Security Intelligence Service canada.ca · 1 May 2026

Canadian Security Intelligence Service releases 2025 public report

Today, the Canadian Security Intelligence Service (CSIS) released its 2025 public report. The report reflects the complexity of Canada’s current national security environment. It highlights the imp...

National Security Agency nsa.gov · 1 May 2026

NSA joins the ASD’s ACSC and Others to Release Guidance on Agentic Artificial Intelligence Systems

FORT MEADE, Md.  – Today, the National Security Agency (NSA) joins the Australian Signals Directorate’s Australian Cyber Security Centre (ASD’s ACSC) and others to release the Cybersecurity In...

Government Information Security Office (URSIV, Slovenia) gov.si · 30 Apr 2026

Povabilo k oddaji ponudbe za analizo varnostne kulture zavezancev po Zakonu o informacijski varnosti

Urad Vlade Republike Slovenije za informacijsko varnost objavlja povabilo k oddaji ponudbe za izvedbo evidenčnega naročila »Analiza varnostne kulture zavezancev ZInfV-1«.

CERT-EU cert.europa.eu · 30 Apr 2026

2026-005: High Vulnerability in the Linux Kernel ("Copy Fail")

On 29 April 2026, a high local privilege escalation vulnerability in the Linux kernel, tracked as CVE-2026-31431 and named "Copy Fail", was publicly disclosed. The vulnerability affects every mains...

Nasjonal sikkerhetsmyndighet (NSM / NCSC Norway) nsm.no · 30 Apr 2026

Alvorlig sårbarhet i Linux-kjernen

Alle Linux-distribusjoner med kjerne kompilert etter 2017 er vurdert som sårbare.

CERT.at cert.at · 30 Apr 2026

Copy Fail Update #1: Kritische Linux-Kernel-Schwachstelle ermöglicht lokale Root-Rechte

Die Schwachstelle steckt im Linux-Kernel und beruht auf einem simplen, aber schweren Logikfehler. Benutzer:innen können dadurch mit wenig Daten gezielt in eigentlich geschützte Speicherbereiche sch...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 29 Apr 2026

Cybersicherheit in Bund und Ländern: BSI und Brandenburg vereinbaren Kooperation

Das BSI und das Land Brandenburg intensivieren ihre Zusammenarbeit im Bereich Cybersicherheit. Dafür unterzeichneten BSI-Präsidentin Claudia Plattner und Brandenburgs Digitalstaatssekretär Ernst Bü...

Bitdefender bitdefender.com · 29 Apr 2026

Operation Road Trap: Fake toll and parking texts are spreading worldwide

A new mass smishing campaign uncovered by Bitdefender Labs shows that scammers are sending tens of thousands of fraudulent text messages to mobile users across 12 countries, impersonating transport...

GreyNoise greynoise.io · 29 Apr 2026

Project Swarm: Join the Collective. Defend the Edge

Today, we're launching Project Swarm — a research initiative that opens the GreyNoise deception platform to the global security community. Project Swarm transforms GreyNoise from a proprietary sens...

Bundesamt für Sicherheit in der Informationstechnik (BSI) bsi.bund.de · 27 Apr 2026

C3A: BSI veröffentlicht Souveränitätskriterien für Cloud-Dienste

Mit den Criteria enabling Cloud Computing Autonomy (C3A) hat das Bundesamt für Sicherheit in der Informationstechnik (BSI) einen richtungsweisenden Handlungsrahmen vorgelegt, der die Souveränitätse...

Information-technology Promotion Agency (IPA) ipa.go.jp · 26 Apr 2026

更新：Cisco Secure Firewall ASAおよびCisco Secure FTDの脆弱性について (CVE-2025-20333等)

Nasjonal sikkerhetsmyndighet (NSM / NCSC Norway) nsm.no · 23 Apr 2026

Persistent skadevare i Cisco Secure Firewall ASA og Secure FTD

Cisco publiserte 23. april 2026 varsel om en persistent bakdør i Cisco Firepower eXtensible Operating System (FXOS) for Cisco Secure Firewall ASA og Cisco Secure FTD .

National Security Agency nsa.gov · 23 Apr 2026

NSA and Others Release Joint Guidance Addressing Multiple China-Nexus Threat Actors Using External Covert Networks to Facilitate Cyber Activity at Scale

FORT MEADE, Md. (April 23, 2026) — The National Security Agency (NSA) joined the United Kingdom’s National Cyber Security Centre, the Australian Signals Directorate’s Australian Cyber Security Cent...

Government Information Security Office (URSIV, Slovenia) gov.si · 23 Apr 2026

Obvestilo o vplivih modelov umetne inteligence na kibernetsko varnost: primer modela Mythos

Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) spremlja razvoj naprednih modelov umetne inteligence (UI), ki imajo vse večji vpliv na področje kibernetske varnosti, predvsem v smis...

FIRST (Forum of Incident Response and Security Teams) first.org · 23 Apr 2026

FIRST Concludes Sold-Out 2026 Cyber Threat Intelligence Conference in Munich

Global practitioners gathered to advance AI-driven CTI, detection engineering, and threat intelligence standards

Federal Office for Cyber Security (BACS/NCSC) admin.ch · 23 Apr 2026

‘Stay safe online and offline’ – Raising awareness at the 2026 BEA spring fair

The National Cyber Security Centre (NCSC) will be hosting an interactive exhibition at the BEA spring fair in Bern between 24 April and 3 May to raise public awareness of cybersecurity. Working alo...

Information System Authority (RIA) ria.ee · 22 Apr 2026

RIA: Digital signatures may stop working in systems that have not been updated by the end of April

The European Commission is carrying out a technical update of the trusted list, which involves a transition from the current version 5 to the new version 6. The Information System Authority (RIA) w...