Chinese espionage group Armory Castle exploits BeyondTrust zero-day, patch delayed a month
A well-resourced Chinese state-linked threat actor exploited a critical BeyondTrust Remote Support vulnerability from late…
Year: 2026
Six Vulnerabilities in Eclipse Milo OPC UA Library Expose Industrial Control Systems to Credential Theft and Denial of Service
CISA has advised organisations using Eclipse Milo versions 0.6.0 through 1.1.4 to upgrade immediately after…
Cisco Secure Email Gateway hit by second zero-day in two months, root access via malicious attachment
A critical, remotely exploitable flaw in Cisco's Secure Email Gateway is being actively exploited before…
French Supermarket Refrigeration Units Targeted in IoT Cyberattack
Hackers manipulated connected freezer controls to force temperatures to dangerous highs, exposing a persistent problem…
CISA Flags Sixth Ivanti Vulnerability of the Year as Microsoft’s Patch Tuesday Tops 1,400 CVEs
Active exploitation of a new Ivanti flaw and a record-breaking Microsoft patch release are demanding…
U.K. Sanctions Cryptomus and Heleket Over Russian Illicit Finance Links
A shape-shifting cryptocurrency processor with a trail of name changes, a phantom regulator, and over…
DOJ Charges 14 in North Korean Remote Worker Scheme as FBI Warns Tactics Are Evolving
Federal authorities dismantled a network of Texas-based laptop farms and charged 14 people, but security…
Docker Hub Flaw Allowed Cross-Account Image Manipulation for Two Years
A privilege confusion bug in Docker Hub's account conversion feature let authenticated users push, pull,…
Anthropic Research Raises AI Botnet Scenario With Significant Caveats
A new Anthropic study demonstrates controlled elements of AI self-replication across IoT hardware, but the…
Ivanti Connect Secure Authentication Bypass Added to CISA’s Known Exploited Vulnerabilities Catalogue
CVE-2026-104935 allows remote unauthenticated attackers to execute arbitrary commands via a spoofing flaw, with active…