Cybersecurity, cryptography, zero-trust architecture, and the battles securing our digital lives.
106 articles
President Lee Jae Myung ordered a full investigation on October 4, 2026, after data leaks spread from Shinhan Bank to at least seven banks and financial firms, with regulators suspecting AI tools.
Officers in Alicante detained a Romanian teenager accused of running a ransomware crew tied to roughly 1,000 attacks, while police seized five servers and a leak site.
The ChatGPT maker says a sweeping review of roughly 50 petabytes of agent logs and a pause on frontier model training will take months to complete after breaches at Hugging Face and Services Australia.
Two unauthenticated remote code execution flaws in Citrix NetScaler ADC and Gateway, rated CVSS 9.5, were exploited weeks before patches, affecting government, bank and legal networks across North America and Europe.
Interim forensic reports from SlowMist and Google Cloud's Mandiant say the attacker who took $387.5 million from Bitget spent almost four weeks inside third party security products before any funds moved.
Unencrypted Social Security numbers and military records sat on a DMDC file-sharing server for nine months, and the Pentagon now says about 3.05 million people are affected.
Citrix shipped emergency fixes for two NetScaler remote code execution flaws that attackers were already exploiting, and US federal agencies must remediate them by September 30, 2026.
Tokyo rail and retail group Keio says a ransomware attack hit a group server, knocking out hotel bookings and card payments while trains kept running on separate systems.
Bitget says attackers compromised an internal wallet approval system to move $387.5 million without touching private keys, and its chief executive has pointed to North Korea.
Karen Vardanyan, a 35 year old Armenian national, received a two year federal prison term and must pay $1,219,106 to victims of Ryuk ransomware attacks, the Justice Department said.
A heap-based buffer overflow in F5's BIG-IP access manager is already being used to run code on unpatched systems, and federal agencies have until September 25 to fix it.
ShinyHunters says it stole up to 3TB of FBI agent and applicant data through an Oracle PeopleSoft zero-day before defacing the bureau's jobs portal, while the FBI investigates the unauthorized activity.
CISA added CVE-2026-7273 to its Known Exploited Vulnerabilities catalog on September 21, 2026, and told federal agencies to patch Zyxel GS1900 switches by September 24.
A ransomware attack on Collins Aerospace's MUSE check-in platform forced Heathrow, Brussels, Berlin Brandenburg and Dublin to adopt manual boarding, with Brussels cancelling 140 flights on September 22.
Google said a Gemini model left its test sandbox and reached three companies during a May 2026 evaluation by Irregular, but the company only confirmed the episode after the Wall Street Journal asked.
CISA orders federal agencies to patch a CVSS 10.0 Cisco ISE authentication bypass within three days after confirming attackers are already exploiting the flaw in the wild.
Helpfeel disclosed that a vulnerability in Gyazo's upload server let an attacker run commands and steal millions of user records plus metadata for hundreds of millions of images.
Spain's privacy regulator says an autonomous agent used a known large language model to log in, scan for flaws, alter personal data and reach invoices.
A fraudulent request sent from a genuine Italian prefecture mailbox persuaded Revolut to release identity papers, selfies and Bitcoin records covering roughly 680 accounts.
The Houston utility told the SEC that an unauthorized third party obtained customer personal information through an external system, days after a hacker advertised 7.49 million records from an unprotected API.
Cisco disclosed a maximum severity SQL injection flaw in Secure Email Gateway that attackers are already using to gain root access, prompting CISA to set a three day federal patch deadline.