Cybersecurity
1,343 publications classified by Officially as Cybersecurity, judged from each publication's own title and summary.
Our reading, not the publisher's. An organization that has claimed its profile can say what its own publications are about, and that will take precedence here. See everything published by organizations filed under Cybersecurity instead.
-
MISP security advisory (AV26-946)
Serial number: AV26-946Date: September 21, 2026 As of September 21, 2026, MISP is affected by vulnerabilities in the following product: MISP Prior to 2.5.47 The Cyber Centre encourages users and ad...
-
MongoDB Security Advisory (AV26-945)
Serial number: AV26-945Date: September 21, 2026 As of September 17, 2026, MongoDB is affected by vulnerabilities in the following products: Mongoid Multiple versions C Driver Multiple versions The ...
-
El DFI de la PFA desbarató una banda que estafaba a clientes de una compañía de telefonía móvil
div class=field field-name-body field-type-text-with-summary field-label-hiddendiv class=field-itemsdiv class=field-item even property=content:encodedpLa causa comenzó en febrero del corriente año ...
Announcement Cybersecurity -
Exim security advisory (AV26-944)
Serial number: AV26-944Date: September 21, 2026 As of September 18, 2026, Exim is affected by vulnerabilities in the following product: Exim Prior to 4.100.1 The Cyber Centre encourages users ...
-
IBM security advisory (AV26-943)
Serial number: AV26-943Date: September 21, 2026 As of September 18, 2026, IBM is affected by vulnerabilities in the following products: CICS TX Advanced Version 10.1 Guardium Data Protection Versio...
-
Gemini’s breach of real companies exposes an AI guardrail problem
Gemini crossed the boundaries of a capture-the-flag test and accessed systems belonging to three real companies.
-
Česká delegace v Jižní Koreji se zapojila do Cyber Summit Korea a mezinárodního cvičení APEX
Delegace Národního úřadu pro kybernetickou a informační bezpečnost (NÚKIB) vedená prvním náměstkem ředitele NÚKIB Tomášem Krejčím se ve dnech 14.–18. září 2026 zúčastnila mezinárodní konference Cyb...
Announcement Cybersecurity -
The Tale of Two INC Ransom Notes: A Ransomware Timeline | Huntress
Huntress analysts reconstructed a three-week INC ransomware attack from endpoint data, uncovering a 17-day lull despite missing process telemetry.
Cybersecurity 3 versions -
TerminalFix: PNG Steganography, (Mon, Sep 21st)
Microsoft Security Research published an interesting blog post "TerminalFix campaign deploys a reverse tunnel through multistage intrusion" about a malware campaign. The aspect that I want to take ...
Cybersecurity 2 versions -
ShinyHunters hacks rival extortion gang and takes over its dark web site
Hackers hacked the hackers as a feud between two cybercrime groups escalated, leaving ShinyHunters with the upper hand over rival Clop.
-
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Ob...
-
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
We explore how AWS neutralizes exposed IAM credentials using managed policies, detailing GitHub secret scanning and CloudTrail monitoring strategies. The post From Exposure to Lockdown: How AWS Neu...
-
Dos nuevos avisos de seguridad
Synology DSM 7.4, versiones anteriores a 7.4-90075. Synology DSM 7.3, versiones anteriores a 7.3.2-86009-4. Synology DSM 7.2.2, versiones anteriores a 7.2.2-72806-9. Synology DSM 7.2.1, versiones a...
-
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it
-
Guidance: Evidence-led assurance for the software development lifecycle
The case and methodology for continuous assurance.
Cybersecurity 1 document -
L’Italia aderisce alla campagna 50-in-5 sulle infrastrutture pubbliche digitali
L’Italia, attraverso l’Agenzia per l’Italia Digitale (AgID), ha aderito alla campagna 50-in-5, un’iniziativa globale che sostiene i Paesi nello sviluppo e nell’adozione di infrastrutture pubbliche ...
Announcement Cybersecurity -
A week in security (September 14 – September 20)
A list of topics we covered in the week of September 14 to September 20 of 2026
-
Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation
GreyNoise has been tracking malicious use of an IP address since early June 2026 due to its frequent use in scans and attacks against a variety of technologies. We detail a few of the more notable ...
-
[Control systems] ABB security advisory (AV26-942)
Serial number: AV26-942Date: September 18, 2026 As of September 18, 2026, ABB published a security advisory to address vulnerabilities in the following product: Freelance Controller Multiple versio...
-
Enabling secure, productive work on personal devices
At Databricks IT, our vision is to empower people to work from anywhere without putting...
-
SolarWinds security advisory (AV26-941)
Serial number: AV26-941Date: September 18, 2026 As of September 17, 2026, SolarWinds is affected by a vulnerability in the following product: SolarWinds Access Rights Manager Prior to 2026.2 The Cy...
-
Arista Networks security advisory (AV26-940)
Serial number: AV26-940Date: September 18, 2026 As of September 9, 2026, Arista Networks is affected by vulnerabilities in the following product: EOS Multiple versions and platforms The Cyber Centr...
-
W3C, threat modeling, and the CRA: a report from GDC 2026
At GDC 2026, W3C Security Interest Group member Giovanni Corti shared how threat modeling was integrated into the revision of ETSI EN 304 617, the draft harmonized standard for browser cybersecurit...
Announcement Cybersecurity -
Google security advisory (AV26-939)
Serial number: AV26-939Date: September 18, 2026 As of September 17, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 153.0.8010.53 The Cyber Centre encourages u...
-
New Android malware uses AI to steal bank logins and PINs
RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.
-
[Control Systems] Moxa security advisory (AV26-938)
Serial number: AV26-938Date: September 18, 2026 As of September 18, 2026, Moxa is affected by a vulnerability in the following product: TN-4500B Series Prior to or equal to v2.0 The Cyber Cent...
-
[Control systems] Advantech security advisory (AV26-937)
Serial number: AV26-937Date: September 18, 2026 As of September 4, 2026, Advantech is affected by vulnerabilities in the following products: EKI-1242EIMS Prior to or equal to V2.00.01 EKI-1242...
-
Grafana security advisory (AV26-936)
Serial number: AV26-936Date: September 18, 2026 As of September 17, 2026, Grafana is affected by vulnerabilities in the following product: Grafana OSS Version 12.3.0 to 12.4.10 Version 13.0.0 to 13...
-
UN Crime Congress: Technology is transforming crime – and the response to it
Sitting in her Vienna office ahead of a pivotal UN gathering in Abu Dhabi, Monica Juma is focused on a simple reality: crime has evolved faster than many of the institutions designed to combat it.
-
Two-week Europol task force identifies 18 sexually abused children worldwide
The Victim Identification Task Force brings together experts from across the globe to combat child sexual exploitation. During the VIDTF, specialists analyse data, images, videos, and intelligence ...
Announcement Cybersecurity -
Understanding a Changing Crime Landscape: UNICRI’s Global Trends Analysis at the 15th UN Crime Congress
Understanding a Changing Crime Landscape: UNICRI’s Global Trends Analysis at the 15th UN Crime Congress mazzini Fri, 18/09/2026 - 12:48
Announcement Cybersecurity -
Kritiska Check Point ievainojamība (CVE-2026-91843)
Check Point ir publicējis brīdinājumu par jaunu kritisku ievainojamību CVE-2026-91843 (CVSS 9.8), kas ietver produktus Multi-Domain Security Management Server un Security Management Serve...
Announcement Cybersecurity -
A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity
Analysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure your agents. The post A Vault with a Heap-View: The Uncomfo...
-
IMY inleder granskning av politiska partiers massutskick av sms
Integritetsskyddsmyndigheten (IMY) inleder en granskning av Sverigedemokraternas massutskick av sms inför valet. Granskningen gäller bland annat hur urvalet av mottagare har skett och vilken rättsl...
-
EU CyCLONe v Sloveniji o pripravljenosti na resne kibernetske krize
Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) 17. in 18. septembra 2026 v Sloveniji gosti BlueOLEx26, srečanje mreže EU CyCLONe. V ospredju so izkušnje iz vaje Cyber Europe 2026, ...
Announcement Cybersecurity -
Fake parcel delivery messages steal your card and bank details
Parcel delivery phishing messages impersonate familiar couriers and use small fees or promised refunds to steal personal and financial information.
-
The End of Point-in-Time Compliance: Why Continuous Audit Readiness Matters to You in the AI Era
AI-driven threats are outpacing traditional audits. Discover how continuous monitoring, automated evidence collection, and risk-based remediation help security teams close compliance gaps and maint...
-
Inside the Modern SOC: Defending the Cross-Environment Pivot
Cross-environment attacks demand a new approach to security operations. Learn how Unit 42 Managed XSIAM helps SOC teams investigate complete attack paths. The post Inside the Modern SOC: Defending ...
-
Tanium security advisory (AV26-935)
Serial Number: AV26-935Date: September 17, 2026 As of September 16, 2026, Tanium is affected by a vulnerability in the following product: Threat Response Prior to Update 15 (v4.12.317) Prior to Upd...
-
Dell security advisory (AV26-934)
Serial number: AV26-934Date: September 17, 2026 As of September 17, 2026, Dell is affected by vulnerabilities in the following products: Dell Networking OS10 Prior to 10.6.1.3 Dell OpenManage Serve...
-
CVE-2026-92943 - Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
Bulletin ID: 2026-115-AWS Scope: AWS Content Type: Important (requires attention) Publication Date: 09/17/2026 12:00 PM PDT Description: AWS IoT Device SDK for Python (AWSIoTPythonSDK) is an open s...
-
The Autonomous Engine Behind Remediation, and What Finally Makes It Safe
Executive Summary Vulnerability exploitation now happens at a speed that manual, ticket-based remediation can’t match. Qualys’s Enterprise TruRisk Management Platform closes that gap with autonomou...
-
Flock cameras are tracking people as well as cars
Two reports reveal how Flock’s license plate camera network tracks people’s movements while oversight continues to lag.
-
Check Point security advisory (AV26-933)
Serial number: AV26-933Date: September 17, 2026 As of September 16, 2026, Check Point is affected by a vulnerability in the following products: Security Management Server, Multi-Domain Securit...
-
AL26-021 - Vulnerabilities Impacting Cisco Identity Services Engine (ISE) and Cisco ISE Passive Identity Connector (ISE-PIC) - CVE-2026-20192, CVE-2026-76423 and CVE-2026-76460
Number: AL26-021Date: September 17, 2026 Audience This Alert is intended for IT professionals and managers. Purpose An Alert is used to raise awareness of a recently identified cyber threat th...
-
Cisco security advisory (AV26-932)
Serial number: AV26-932Date: September 17, 2026 As of September 16, 2026, Cisco is affected by vulnerabilities in the following products: Cisco Secure Firewall Threat Defense (FTD) Software Pr...
-
VU#280377: Dokploy is vulnerable to OS command injection
Dokploy versions 0.29.8 and 0.29.11, as well as commit 24b02f5 on the canary branch, are vulnerable to OS command injection during the backup creation and restoration processes. The vulnerability s...
-
AI Threat Landscape Digest: July–August 2026
The defining development of the period came not from attackers but from the AI labs themselves, whose models broke out of controlled evaluations and reached real systems. In the wild, the criminal ...
-
Revolut phishing texts appear days after data breach
Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor.