Cybersecurity
1,758 publications classified by Officially as Cybersecurity, judged from each publication's own title and summary.
Our reading, not the publisher's. An organization that has claimed its profile can say what its own publications are about, and that will take precedence here. See everything published by organizations filed under Cybersecurity instead.
-
Veeam security advisory (AV26-513) – Update 1
Serial number: AV26-513Date: May 27, 2026Updated: September 21, 2026 On May 27, 2026, Veeam published security advisories to address vulnerabilities in the following products: Veeam Backu...
-
MISP security advisory (AV26-946)
Serial number: AV26-946Date: September 21, 2026 As of September 21, 2026, MISP is affected by vulnerabilities in the following product: MISP Prior to 2.5.47 The Cyber Centre encourages users and ad...
-
MongoDB Security Advisory (AV26-945)
Serial number: AV26-945Date: September 21, 2026 As of September 17, 2026, MongoDB is affected by vulnerabilities in the following products: Mongoid Multiple versions C Driver Multiple versions The ...
-
El DFI de la PFA desbarató una banda que estafaba a clientes de una compañía de telefonía móvil
div class=field field-name-body field-type-text-with-summary field-label-hiddendiv class=field-itemsdiv class=field-item even property=content:encodedpLa causa comenzó en febrero del corriente año ...
Announcement Cybersecurity -
Exim security advisory (AV26-944)
Serial number: AV26-944Date: September 21, 2026 As of September 18, 2026, Exim is affected by vulnerabilities in the following product: Exim Prior to 4.100.1 The Cyber Centre encourages users ...
-
AI Security Is an Engineering Problem — How to Solve It at Every Layer of the Agent Stack
AI security is an engineering problem. …
Product release Cybersecurity -
IBM security advisory (AV26-943)
Serial number: AV26-943Date: September 21, 2026 As of September 18, 2026, IBM is affected by vulnerabilities in the following products: CICS TX Advanced Version 10.1 Guardium Data Protection Versio...
-
Gemini’s breach of real companies exposes an AI guardrail problem
Gemini crossed the boundaries of a capture-the-flag test and accessed systems belonging to three real companies.
-
Česká delegace v Jižní Koreji se zapojila do Cyber Summit Korea a mezinárodního cvičení APEX
Delegace Národního úřadu pro kybernetickou a informační bezpečnost (NÚKIB) vedená prvním náměstkem ředitele NÚKIB Tomášem Krejčím se ve dnech 14.–18. září 2026 zúčastnila mezinárodní konference Cyb...
Announcement Cybersecurity -
The Tale of Two INC Ransom Notes: A Ransomware Timeline | Huntress
Huntress analysts reconstructed a three-week INC ransomware attack from endpoint data, uncovering a 17-day lull despite missing process telemetry.
Cybersecurity 3 versions -
TerminalFix: PNG Steganography, (Mon, Sep 21st)
Microsoft Security Research published an interesting blog post "TerminalFix campaign deploys a reverse tunnel through multistage intrusion" about a malware campaign. The aspect that I want to take ...
Cybersecurity 2 versions -
ShinyHunters hacks rival extortion gang and takes over its dark web site
Hackers hacked the hackers as a feud between two cybercrime groups escalated, leaving ShinyHunters with the upper hand over rival Clop.
-
Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO
Kaspersky GERT experts dive into the technical incident analysis of PAYLOAD ransomware: an encryptionless, binary-less operation that abused Active Directory mechanisms for managing Group Policy Ob...
-
From Exposure to Lockdown: How AWS Neutralizes Compromised IAM Credentials through Managed Policies
We explore how AWS neutralizes exposed IAM credentials using managed policies, detailing GitHub secret scanning and CloudTrail monitoring strategies. The post From Exposure to Lockdown: How AWS Neu...
-
Dos nuevos avisos de seguridad
Synology DSM 7.4, versiones anteriores a 7.4-90075. Synology DSM 7.3, versiones anteriores a 7.3.2-86009-4. Synology DSM 7.2.2, versiones anteriores a 7.2.2-72806-9. Synology DSM 7.2.1, versiones a...
-
The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive
As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it
-
Guidance: Evidence-led assurance for the software development lifecycle
The case and methodology for continuous assurance.
Cybersecurity 1 document -
A week in security (September 14 – September 20)
A list of topics we covered in the week of September 14 to September 20 of 2026
-
F5 BIG-IP Denial of Service Vulnerability
Announcement Cybersecurity -
Open Season on Kapibala: Attacker Steals Over 18,000 Government Records Through WordPress Exploitation
GreyNoise has been tracking malicious use of an IP address since early June 2026 due to its frequent use in scans and attacks against a variety of technologies. We detail a few of the more notable ...
-
Check Point security advisory (AV26-902) – Update 2
Serial Number: AV26-902Date: September 9, 2026Updated: September 22, 2026 As of September 9, 2026, Check Point is affected by vulnerabilities in the following products: Security Gateway Multiple ve...
Cybersecurity 3 versions -
Active Exploitation of Vulnerability in Cisco Identity Services Engine
Attackers are exploiting a critical vulnerability in Cisco Identity Services Engine and Cisco Identity Services Engine Passive Identity Connector to bypass authentication and gain unauthorised acce...
Announcement Cybersecurity -
[Control systems] ABB security advisory (AV26-942)
Serial number: AV26-942Date: September 18, 2026 As of September 18, 2026, ABB published a security advisory to address vulnerabilities in the following product: Freelance Controller Multiple versio...
-
Enabling secure, productive work on personal devices
At Databricks IT, our vision is to empower people to work from anywhere without putting...
-
SolarWinds security advisory (AV26-941)
Serial number: AV26-941Date: September 18, 2026 As of September 17, 2026, SolarWinds is affected by a vulnerability in the following product: SolarWinds Access Rights Manager Prior to 2026.2 The Cy...
-
Arista Networks security advisory (AV26-940)
Serial number: AV26-940Date: September 18, 2026 As of September 9, 2026, Arista Networks is affected by vulnerabilities in the following product: EOS Multiple versions and platforms The Cyber Centr...
-
W3C, threat modeling, and the CRA: a report from GDC 2026
At GDC 2026, W3C Security Interest Group member Giovanni Corti shared how threat modeling was integrated into the revision of ETSI EN 304 617, the draft harmonized standard for browser cybersecurit...
Announcement Cybersecurity -
Google security advisory (AV26-939)
Serial number: AV26-939Date: September 18, 2026 As of September 17, 2026, Google is affected by vulnerabilities in the following product: Chrome Prior to 153.0.8010.53 The Cyber Centre encourages u...
-
New Android malware uses AI to steal bank logins and PINs
RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.
-
[Control Systems] Moxa security advisory (AV26-938)
Serial number: AV26-938Date: September 18, 2026 As of September 18, 2026, Moxa is affected by a vulnerability in the following product: TN-4500B Series Prior to or equal to v2.0 The Cyber Cent...
-
[Control systems] Advantech security advisory (AV26-937)
Serial number: AV26-937Date: September 18, 2026 As of September 4, 2026, Advantech is affected by vulnerabilities in the following products: EKI-1242EIMS Prior to or equal to V2.00.01 EKI-1242...
-
Grafana security advisory (AV26-936)
Serial number: AV26-936Date: September 18, 2026 As of September 17, 2026, Grafana is affected by vulnerabilities in the following product: Grafana OSS Version 12.3.0 to 12.4.10 Version 13.0.0 to 13...
-
Two-week Europol task force identifies 18 sexually abused children worldwide
The Victim Identification Task Force brings together experts from across the globe to combat child sexual exploitation. During the VIDTF, specialists analyse data, images, videos, and intelligence ...
Announcement Cybersecurity -
LausivLoader analysis, or how to pass data between malware stages, (Thu, Sep 17th)
At the end of August, a malspam message was caught in the quarantine of a mail gateway operated by one of my customers. The message was not especially remarkable – it asked the recipient to revie...
Cybersecurity 2 versions -
CERT-SE:s veckobrev v.38
Den här veckan innehåller CERT-SE:s veckobrev bland annat information om att NCSC och AI Sweden med flera bjuder in till seminarium den 22 oktober på temat “Modern sårbarhetshantering i en AI-drive...
Announcement Cybersecurity -
Kritiska Check Point ievainojamība (CVE-2026-91843)
Check Point ir publicējis brīdinājumu par jaunu kritisku ievainojamību CVE-2026-91843 (CVSS 9.8), kas ietver produktus Multi-Domain Security Management Server un Security Management Serve...
Announcement Cybersecurity -
A Vault with a Heap-View: The Uncomfortable Space Between AgentCore Harness and Identity
Analysis of how default configurations in AWS AgentCore Harness allow prompt injection to exfiltrate credentials, and key steps to secure your agents. The post A Vault with a Heap-View: The Uncomfo...
-
EU CyCLONe v Sloveniji o pripravljenosti na resne kibernetske krize
Urad Vlade Republike Slovenije za informacijsko varnost (URSIV) 17. in 18. septembra 2026 v Sloveniji gosti BlueOLEx26, srečanje mreže EU CyCLONe. V ospredju so izkušnje iz vaje Cyber Europe 2026, ...
Announcement Cybersecurity -
Fake parcel delivery messages steal your card and bank details
Parcel delivery phishing messages impersonate familiar couriers and use small fees or promised refunds to steal personal and financial information.
-
ISC BIND Multiple Vulnerabilities
Announcement Cybersecurity -
HGiga｜OAKlouds - 2 Vulnerabilities
Announcement Cybersecurity -
Google Chrome Multiple Vulnerabilities
Announcement Cybersecurity -
EFF to Lawmakers: Ground AI Cybersecurity Rules in Best Practices
With doomsday AI scenarios dominating the news, lawmakers are rightly concerned about reports concerning security breaches at major US AI labs, such as the OpenAI–Hugging Face incident and the many...
-
Comprehensive approach to security: Federal Council adopts the 2026 Security Policy Strategy
Russia’s war of aggression against Ukraine, hybrid threats and critical dependencies pose challenges for the state, the economy and society. With the 2026 Security Policy Strategy, the Federal Coun...
Announcement Cybersecurity -
The End of Point-in-Time Compliance: Why Continuous Audit Readiness Matters to You in the AI Era
AI-driven threats are outpacing traditional audits. Discover how continuous monitoring, automated evidence collection, and risk-based remediation help security teams close compliance gaps and maint...
-
Inside the Modern SOC: Defending the Cross-Environment Pivot
Cross-environment attacks demand a new approach to security operations. Learn how Unit 42 Managed XSIAM helps SOC teams investigate complete attack paths. The post Inside the Modern SOC: Defending ...
-
Tanium security advisory (AV26-935)
Serial Number: AV26-935Date: September 17, 2026 As of September 16, 2026, Tanium is affected by a vulnerability in the following product: Threat Response Prior to Update 15 (v4.12.317) Prior to Upd...