CISA Adds Six-Year-Old Microsoft SQL Server RCE Flaw to Known Exploited Vulnerabilities Catalogue
CVE-2019-1068 carries a CISA-mandated remediation deadline of 29 August 2026, giving organisations a finite window…
Year: 2026
US Authorities Disrupt Eight-Year Chinese Espionage Operation Targeting Federal Agencies and Critical Infrastructure
The FBI and Justice Department seized domains and exposed a Chinese government-linked front company whose…
Baby Monitors Are Becoming Continuous AI Surveillance Platforms — And Parents Are Opting In
Consumer infant-tracking devices are collecting vast amounts of biometric and behavioural data on children, raising…
CISA Adds Gitea Code Injection Flaw to Known Exploited Vulnerabilities Catalog
CVE-2026-60004 is now confirmed as actively exploited, placing Gitea installations on the radar for immediate…
GTA VI Leak Exposes Familiar Playbook: IP Theft, Insider Access, and a New Monetisation Twist
The breach at Rockstar Games follows patterns security teams have seen before, but the attacker's…
Iran-Linked Actors Suspected in UK Power Plant Shutdown as OT Targeting Widens
A small UK power station went offline for four days in what is believed to…
CISA Adds Perfect-10 Oracle WebLogic and HTTP Server Flaw to Known Exploited Vulnerabilities Catalogue
A maximum-severity improper access control vulnerability affecting Oracle HTTP Server and WebLogic Server Proxy Plug-in…
AI Power Users Pose Disproportionate Risk to Enterprise Security
New Akamai research finds the top 5% of enterprise AI adopters are embedding unvetted tools…
Chinese-Speaking Threat Group UAT-10147 Deploys AI-Assisted Attacks Against Web Servers Globally
A newly detailed cybercrime group is combining AI-scaled operations, an EDR bypass payload, and a…
Paper Password Books Are Back — What They Mean for Enterprise Security Culture
A $4.90 notebook at Australia Post has reignited a nuanced debate about physical credential storage,…