The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
Go 1.27.2 and 1.26.9 arrived on Oct 8, 2026 with corrections for 15 security flaws.
Cybersecurity researchers have disclosed details of a previously unseen variant of the DarkSword iOS exploit kit called P7 DarkSword. "Compared with the varian…
The company said its investigation, carried out with external experts, found the attackers had accessed “some personal information, including names and contact…
A drone strike on a large Yandex data center caused a significant disruption to the Russian tech giant's network, with connectivity reportedly falling to aroun…
The U.S. Department of Justice (DoJ) on Wednesday announced charges against a 50-year-old U.S. and Israeli national for allegedly defrauding ransomware victims…
Cybersecurity researchers are calling attention to a new malware family that has been observed targeting exposed artificial intelligence (AI) and large languag…
An npm package used throughout the SubQuery project was poisoned.
The personal data of at least 68,000 people was reportedly exposed in breaches of at least seven financial institutions, with officials saying they believe a C…
Osaka Metropolitan University said on Tuesday that the outage left its internal network, email and a range of administrative and academic systems unavailable.
JiJi reports: Japanese police have captured a Russian national believed to be a key member of the “Qilin” international hacker group and extradited him to Germ…
An update that solves one vulnerability can now be installed.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Dell warned customers to patch a critical vulnerability in the System Update (DSU) command-line interface (CLI) deployment tool as soon as possible.…
South Korea's Financial Services Commission (FSC) held an emergency meeting following a series of cyberattacks targeting financial institutions in the country.…
An update that solves 2 vulnerabilities can now be installed.
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
Update to upstream 1.5.4, including fix for high severity vulnerability GHSA- cr2j-534f-mf3g and for CVE-2026-41178.
GNOME 51.0
Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp group subscriber campaign dubbed Phant…
A malicious MCP server could trick an application built on the official MCP Python SDK into handing over the OAuth credentials it uses to log in to a real serv…
Update
The attacker who stole about $388 million from the cryptocurrency exchange Bitget gained access through a vulnerability in a third-party security product the e…
Update