Cybersecurity
1,876 publications from 84 organizations filed under Cybersecurity.
Filed by publisher, not by subject — these are everything those organizations published, not everything published about Cybersecurity. See the 1,610 publications Officially classified as Cybersecurity instead.
-
How Cloudflare addressed a cross-tenant data exposure vulnerability in Containers
External security researchers at Accomplish identified a vulnerability in Cloudflare Containers that could expose residual disk data from previous workloads. We explain how the issue worked, how we...
-
Microsoft security advisory – August 2026 monthly rollup (AV26-804) – Update 4
Serial Number: AV26-804Date: August 11, 2026Updated:September 25, 2026 As of August 11, 2026, Microsoft is affected by vulnerabilities in the following products: Microsoft .NET Frame...
Cybersecurity 3 versions -
WebPros security advisory (AV26-961)
Serial number: AV26-961Date: September 24, 2026 As of September 23, 2026, WebPros is affected by vulnerabilities in the following products: Plesk Versions 18.0.34 to 18.0.80.7 Version 18.0.81.0 Ple...
-
Gran Canaria impulsa la prevención en ciberseguridad entre las empresas ante el avance de los ataques digitales
En un escenario en el que la digitalización avanza con rapidez y los ciberataques afectan cada vez más a organizaciones de todos los tamaños, Gran Canaria ha acogido hoy una nueva jornada de +Ciber...
-
Managed or Modified: Choose How Huntress Hardens Microsoft 365
Managed ISPM now offers two deployment modes. Choose fully automated hardening or full control over which Microsoft 365 controls roll out, and when. See how it works.
-
OpenAI agent breached Australian government site, took months to report it
The agent was looking for public spending data. It found a way into non-public files instead. What do we need to change to stop this from happening?
Cybersecurity 2 versions -
The Not So Silent Miner: Threat Actor Compiles Cryptominer on the Endpoint
Threat actors exploited Samsung MagicINFO to install AnyDesk, disable Defender, and compile a Monero miner directly on a victim endpoint. Learn the detection signals.
-
When Business Email Compromise Starts Rewriting Reality
Business Email Compromise (BEC) operates on a familiar playbook. Threat actors breach a mailbox, silently monitor operations, map approval chains, and ultimately exploit that access to divert funds...
Cybersecurity 2 versions -
Rilevata vulnerabilità in PaperCut NG/MF
Rilevate 3 vulnerabilità di sicurezza, di cui 2 con gravità "alta", in PaperCut NG/MF, software di gestione e monitoraggio della stampa per ambienti aziendali. Tali vulnerabilità, qualora sfruttate...
Advisory Cybersecurity -
New Browser Guard features add protection before and after you click
Spot dangerous sites before you click—and check for scams once you’re there.
-
Aktive Ausnutzung: Kritische Sicherheitslücke in F5 BIG-IP APM (CVE-2026-94127)
In der OAuth Komponente von F5 BIG-IP APM existiert eine kritische Schwachstelle, welche dass unauthentifizierte Ausführen von Schadcode aus der Ferne erlaubt. Betroffen sind Systeme, welche BIG-IP...
Announcement Cybersecurity -
Update Chrome: 108 security fixes for desktop, new release for Android
Google has released Chrome 154 for desktop and begun rolling out Chrome 155 for Android. Here’s what to check on your device.
-
Nová Výzva Národního koordinačního centra podpoří vývoj a nasazení kyberbezpečnostních řešení do praxe
Národní úřad pro kybernetickou a informační bezpečnost (NÚKIB) v roli Národního koordinačního centra výzkumu a vývoje v oblasti kybernetické bezpečnosti vyhlašuje 5. Výzvu k podávání projektů s náz...
Announcement Cybersecurity -
Kwetsbaarheid in WordPress wordt actief misbruikt: update nu
Er is een kwetsbaarheid gevonden in WordPress met het kenmerk CVE-2026-87902. Deze kwetsbaarheid kan een hoog risico vormen omdat een aanvaller zonder inloggegevens mogelijk schadelijke acties kan ...
Cybersecurity 2 versions -
Dos nuevos avisos de seguridad
Elemento de ruta de búsqueda sin controlar en Evope Collector Collector versión 1.1.6.9.0, Core: 1.1.3.2.4, Update: 1.1.0.3.6 – Models: Evope.Service.exe y wtsapi32.dll. INCIBE ha coordinado la pub...
-
MacSync under the microscope: new delivery methods and a new payload
We look at a new version of the MacSync macOS stealer with a backdoor module that targets crypto enthusiasts and developers.
-
Rilevate vulnerabilità in Apache Tomcat
Apache ha rilasciato aggiornamenti di sicurezza per risolvere 15 vulnerabilità, di cui 4 con gravità "critica" e 9 con gravità "alta", in Apache Tomcat e Apache Tomcat Native. …
Advisory Cybersecurity -
Truslen fra destruktive cyberangreb hæves til høj
Det er sandsynligt, at Rusland vil forsøge at udføre destruktive cyberangreb mod Danmark. Det vurderer Styrelsen for Samfundssikkerhed, som derfor hæver trusselsniveauet for destruktive cyberangreb...
Announcement Cybersecurity -
Risolte vulnerabilità su GitLab CE/EE
Rilasciati aggiornamenti di sicurezza che risolvono 11 vulnerabilità, di cui 2 con gravità “critica” e 2 con gravità “alta”, in GitLab Community Edition (CE) ed Enterprise Edition (EE). Tali vulner...
-
Brecha de datos notificada en España vinculada a un ataque ejecutado mediante un agente de inteligencia artificial
La brecha ocurrió antes del 14 de septiembre de 2026, cuando la AEPD comunicó que había recibido la primera notificación en España de un caso en el que el ataque habría sido ejecutado mediante un a...
-
Risolte vulnerabilità in prodotti ManageEngine
Aggiornamenti di sicurezza Zoho sanano 14 vulnerabilità, di cui 2 con gravità “critica” e 12 con gravità “alta”, che interessano i prodotti ManageEngine Applications Manager, Applications Manager P...
Advisory Cybersecurity -
Been told to pay at a Bitcoin ATM? Read this first
Crypto ATM scams often follow a predictable script – here’s how to recognize it and what to do if you’ve already been caught out
-
Google’s location data privacy failures draw a €403 million fine
Turning off Location History did not necessarily stop Google from recording where users went. Ireland’s privacy regulator has now fined the company €403 million.
-
AI versnelt en vergroot de dreiging: nu handelen noodzakelijk
AI (Artificial Intelligence) versnelt en vergroot de dreiging van cyberaanvallen tegen onze overheid en maatschappij. De aanvallen worden door AI groter, complexer en zullen toenemen. Daarom is daa...
-
AI versnelt en vergroot de dreiging: nu handelen noodzakelijk
AI (Artificial Intelligence) versnelt en vergroot de dreiging van cyberaanvallen tegen onze overheid en maatschappij. De aanvallen worden door AI groter, complexer en zullen toenemen. Daarom is daa...
-
Boletín de vulnerabilidades
Vulnerabilidades con productos recientemente documentados: No hay vulnerabilidades nuevas para los productos a los que está suscrito. …
-
Rilevata vulnerabilità in WatchGuard
Rilevata una vulnerabilità di sicurezza con gravità "alta" in WatchGuard AuthPoint Authentication Gateway, componente on-premise della piattaforma MFA AuthPoint che collega Active Directory/LDAP e ...
Advisory Cybersecurity -
Protecting citizens, preserving rights
How can law enforcement make effective use of data and technology while ensuring that fundamental rights and the rule of law remain protected? This question was at the heart of the 17th Europol Dat...
Announcement Cybersecurity -
Assess and manage your council’s cyber resilience alpha reassessment
MHCLG's Assess and manage your council’s cyber resilience alpha reassessment report
-
ezGlobal｜GPM LIGHT - Sensitive Data Exposure
Announcement -
One URL, Three Different Tricks, (Thu, Sep 24th)
Yesterday, we received a phishing email with an interesting link. At first sight, it looks like garbage, but every piece of it has been carefully crafted to confuse basic security controls. Here is...
-
WordPress Core Unauthenticated Path Traversal Affects Every Version Since 2016, Can Enable Code Execution (CVE-2026-87902)
WordPress Core Unauthenticated Path Traversal Affects Every Version Since 2016, Can Enable Code Execution (CVE-2026-87902) conradNITA Thu, 09/24/2026 - 08:12
Announcement Cybersecurity -
CrowdStrike Named a Leader in The Forrester Wave™: Proactive Security Platforms, Q3 2026
CrowdStrike received the highest Strategy score in the evaluation and the highest possible scores in Innovation and Roadmap. Learn more!
-
WordPress Remote Code Execution Vulnerability
A vulnerability was identified in identified in WordPress. A remote attacker could exploit this vulnerability to trigger remote code execution on the targeted system.
Announcement -
Strengthening Switzerland’s cybersecurity through cooperation
Around 250 representatives from politics, public administration, business and academia attended the National Cybersecurity Conference in Bern to discuss the opportunities and challenges facing digi...
Announcement -
Multiples vulnérabilités dans PHP (24 septembre 2026)
De multiples vulnérabilités ont été découvertes dans PHP. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données...
Announcement Cybersecurity -
Security Slam 2026 – Fall Edition
The Open Source Security Foundation (OpenSSF) is partnering with the Cloud Native Computing Foundation (CNCF) Security Technical Advisory Group (TAG Security) to support the 2026 Security Slam at K...
-
Forcepoint security advisory (AV26-960)
Serial Number: AV26-960Date: September 23, 2026 As of September 23, 2026, Forcepoint is affected by a vulnerability in the following product: Forcepoint Security Engine (NGFW) Versions 7.1.0 to 7.1...
-
Dell security advisory (AV26-959)
Serial number: AV26-959Date: September 23, 2026 As of September 21, 2026, Dell is affected by vulnerabilities in the following products: Dell Command Powershell Provider (DCPP) Prior to 2.10.2 Dell...
-
How device code phishing gives scammers access to your account
A scammer asks you to enter a code to open a file or join a meeting. Approving it could sign them in to your account instead.
-
MikroTik security advisory (AV26-958)
Serial number: AV26-958Date: September 23, 2026 As of September 22, 2026, MikroTik is affected by a vulnerability in the following product: RouterOS Prior to 7.25beta5 The Cyber Centre encourages u...
-
VU#273940: Enterprise Access Management EAM does not rotate RSA keys
Imprivata Enterprise Access Management (EAM), an authentication and single sign-on platform for enterprise and clinical environments, contains a vulnerability in versions 26.2.6 and below. The prod...
-
2026-09-23, Version 22.23.3 'Jod' (LTS), @aduh95 prepared by @juanarbol
Notable Changes [fe2a6b2be8] - crypto: update root certificates to NSS 3.125 (Node.js GitHub Bot) #64746 [871167ddfd] - deps: update corepack to 0.36.0 (Node.js GitHub Bot) #65653 [b816fc8958] - de...
Cybersecurity 2 versions -
NVIDIA security advisory (AV26-957)
Serial number: AV26-957Date: September 23, 2026 As of September 22, 2026, NVIDIA is affected by vulnerabilities in the following products: Infrastructure Controller Versions 0 to 1.9 NeMo Speech Ve...
-
GitHub security advisory (AV26-956)
Serial Number: AV26-956Date: September 23, 2026 As of September 22, 2026, GitHub is affected by vulnerabilities in the following product: Enterprise Server 3.17.0 Prior to 3.17.21 3.18.0 Prior to 3...
-
Google Chrome security advisory (AV26-955)
Serial number: AV26-955Date: September 23, 2026 As of September 22, 2026, Google published a security advisory to address vulnerabilities in the following product: Stable Channel Chrome for Desktop...
-
Ubiquiti security advisory (AV26-954)
Serial number: AV26-954Date: September 23, 2026 As of September 22, 2026, Ubiquiti Inc is affected by vulnerabilities in the following products: Cloud Gateways Prior to 5.1.31 Dream Machines Prior ...
-
VU#754548: Cinnamon's Kotaemon contains improper authorization checks in Kotaemon multi‑user chat handlers
Cinnamon's Kotaemon (all versions up to v0.12.0) multi‑user chat interface does not verify conversation ownership when loading a conversation. Any authenticated user can read, delete, rename, or ov...