996 casos · pág. 7/50
The UK Information Commissioner's Office (ICO) has issued reprimands, not fines, to Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales (Data Cymru) over a ransomware attack on 1 November 2024 (theregister.com, infosecurity-magazine.com). The intruder entered Data Cymru's network through a forgotten test account, Test2 (…
Sekoia announced an integration between Zimperium Mobile Threat Defense (MTD) and the Sekoia autonomous SOC platform. It brings mobile threat telemetry into a single environment for detection, investigation and threat hunting. The post is vendor product content, not a new incident or vulnerability. It argues that mobile devices are now a …
Apache disclosed eight vulnerabilities in Apache Tomcat, three rated Important and five rated Low. They cover authentication bypass, cross-user data exposure, insecure socket access and cryptographic configuration failures. Fixes are in Tomcat 11.0.27, 10.1.61 and 9.0.123, depending on the branch. Exposure depends on the component and con…
Oracle released its October 2026 Critical Patch Update on October 20, the final quarterly update of the year. It delivers 1,295 security patches for 1,209 unique CVEs across 33 product families (tenable.com). The patch count is higher than the CVE count because one CVE can appear in several product matrices (gbhackers.com). 112 patches (8…
Horizon3.ai has released a public proof-of-concept exploit for CVE-2026-106173, a critical flaw in Fortinet FortiSIEM that lets unauthenticated attackers turn an arbitrary file write into remote code execution. Researcher Zach Hanley published the technical analysis on October 20, following Fortinet's advisory FG-IR-26-180 of October 13. …
Symantec reports that the Russia-linked APT28 (aka Swallowtail, Fancy Bear, Forest Blizzard, BlueDelta), which the U.S. government links to the GRU, targeted organizations in two NATO member states. Victims were a naval shipbuilder, a manufacturer of military aircraft engines and a law enforcement agency (thehackernews.com, cyberscoop.com…
Israeli startup Hirundo reports that Alibaba's Qwen3-Coder shows a pro-CCP bias, producing more vulnerable code when asked to build applications for Western organizations. This is consistent with earlier findings by CrowdStrike (November 2025) and Booz Allen Hamilton (May 2026). Hirundo had the model build web services (sign-up, login, se…
Microsoft says it mistakenly marked a bug affecting Always On VPN connections as resolved in the October 2026 Patch Tuesday cumulative updates for Windows 11. The status was reverted to Mitigated, and a permanent fix is planned for an update "in the coming weeks". The issue first appeared after the September 2026 security updates on Windo…
Unknown threat actors breached the TeamUpdraft website on 17-18 October 2026 and likely accessed its customer database, which holds connection keys for UpdraftCentral, UpdraftVault and UpdraftClone. Patchstack observed an attacker holding valid UpdraftCentral dashboard keys issuing signed commands to install backdoor plugins on connected …
A BushidoToken journal entry reviews four 2026 UK prosecutions involving teenage offenders at the intersection of cybercrime and online extremism. In July 2026, Thalha Jubair (20) and Owen Flowers (18), part of the Scattered Spider collective, were each sentenced to five years and six months for the late August 2024 breach of Transport fo…
A Flare analysis argues that Scattered Spider, LAPSUS$ and ShinyHunters are distinct intrusion clusters within The Com, a decentralized, mostly English-speaking cybercriminal subculture, and not interchangeable names for one group. It describes SP1D3R HUNTERS (also called Scattered LAPSUS$ Hunters, SLH) as a shared brand and coordination …
Patchstack reports a critical remote code execution vulnerability in PHP that is already being actively exploited after details leaked on October 20. Because the flaw sits in the language runtime, any PHP-based application on a vulnerable version is exposed, including WordPress, Drupal, Magento, Joomla and Laravel sites. Patchstack confir…
Dispel announced an integration between Tenable One OT Exposure and the Dispel Zero Trust Engine, its OT secure remote access platform. The integration feeds Tenable's real-time OT/IoT asset and vulnerability intelligence into every remote access decision. It is a product announcement with no vulnerability, incident or threat actor involv…
Tenable Holdings announced Tenable OPEN for AI, an expansion of its Tenable Open Partner Exchange Network (OPEN) that provides validated AI workflows combining Tenable exposure intelligence with customers' preferred AI models, agents and tools. Launch partners include BeyondTrust, Cohesity, Command Zero, Corelight, Infoblox, Recorded Futu…
Nozomi Networks and Schweitzer Engineering Laboratories (SEL) announced an expanded global partnership aimed at helping critical infrastructure operators, particularly utilities, improve OT visibility, cyber resilience and regulatory readiness. The expansion adds a direct integration between the Nozomi platform and SEL OT Software-Defined…
Rust 1.100, scheduled for November 12, 2026, will stabilize Cargo dependency cooldowns. Developers can reject newly published crate versions until they reach a configurable minimum age. The aim is to give researchers, maintainers and registries time to detect malicious releases before automated updates spread them across development envir…
On 19 October 2026 an attacker used a hijacked GitHub account of an OVHcloud contributor to overwrite the download archives of five existing OVHcloud CLI releases (v0.11.0 to v0.15.0) with a build designed to steal secrets from the disk of any machine that ran it (thehackernews.com, bleepingcomputer.com). The files were live for about 94 …
Russian firm Solar (a Rostelecom subsidiary) reported a nearly two-year intrusion at an unnamed Russian healthcare organization, attributed to the Belarus-aligned hacktivist cluster Partisan Zmiy (Cyber Partisans). Solar found the compromise in December 2025, but the earliest signs date to early 2024. Unlike the group's usual destructive …
State Bank of India (SBI) said in an October 21 stock-exchange filing that it identified 3,897 customer records with personal information within a set of about 375,000 records circulating on the dark web (thehackernews.com). The bank does not yet know where the data came from or whether it is authentic. The figure matches a claim by a thr…
Citizen Lab, working with the SHARE Foundation, confirmed with high confidence that the iPhone of Vladan Đokić, rector of the University of Belgrade and a prominent supporter of Serbia's student-led anti-corruption protests, was infected with NSO Group's Pegasus in 2026 through a zero-click exploit (thehackernews.com, securityaffairs.com,…
