Microsoft’s follow-up patch wave hits two dozen Office bugs
A second batch of fixes lands days after the record Patch Tuesday rollout.
The Latest
Silent Lynx turned operational sloppiness into its own fingerprint
Open directories and Astana office hours gave away a Kazakhstan-linked espionage crew.
A contractor breach silenced US bankruptcy court notices
BAE Systems runs the noticing center, and a week-long outage left creditors unserved.
Typosquatted Arch packages handed strangers root on desktops
Misspelled AUR helper names turned a build step into full-system compromise.
Federal patch list adds an Atlassian file-read bug under attack
CISA gave agencies three weeks to close a flaw attackers already reached through double colons.
PwnEscape lets a VM guest slip past the Linux kernel boundary
The flaw surfaced during a million-dollar sandbox challenge and now carries stable-branch fixes.
A stealthy implant sat on 500 firewalls after one FortiManager hit
Unit 42 traced a two-year intrusion that turned a single management box into keys for hundreds of networks.
Chinese spies rode a BeyondTrust zero-day into support appliances
A suspected China-nexus crew spent weeks inside Remote Support boxes before anyone noticed.
Legal Aid breach sweeps up archived claims reaching back to 1978
UK officials now say the April 2025 intrusion took far more historical data than first thought, including probation records for…
UK sanctions a crypto platform it calls a laundering hub
Britain has frozen the assets of Cryptomus and three payment services, citing a pipeline that helps Russia move money and…
North Macedonia charges the alleged OLVX market operator
Prosecutors say a 20-year-old ran a marketplace selling stolen data and attack tools, pulling in more than $500,000 since 2023.
Citizen Lab ties a spyware pipeline to ordinary ad slots
Researchers say targeted advertising is being used to push zero-click spyware onto millions of devices, with an Israeli ad firm…
CikaBika RAT hides its command channel inside Discord
A Rust-based remote access trojan delivered through document lures is using Discord as its control panel, Darktrace reports.
Hirudo trojan swaps out your banking app for its own copy
A new Android RAT uninstalls the real banking app and replaces it with a modified build that blinds the bank's…
Spotlight
Palo Alto patches a firewall zero-day hit by limited attacks
A PAN-OS flaw in the management interface lets an authenticated attacker run code as root, and CISA wants federal systems fixed within three days.
An unauthenticated attachment bug hands root on Cisco email gear
Attackers are already exploiting a critical Secure Email Gateway flaw that hands over root access, and federal agencies have three days to patch.
Drone strikes knock Yandex datacenters and payments offline
Three Ukrainian drone attacks hit Yandex facilities, leaving cloud and payment services degraded for days.
Microsoft dismantles a Chinese phishing market that sent a billion messages
A court order let Microsoft and Health-ISAC seize the infrastructure behind YAM Store, CoGUI, and Iron Man.
Features
US agents seize 187 laptops in a North Korean IT worker sweep
Two Americans are accused of helping Pyongyang's fake remote workers land jobs at US companies.
SAP patches a perfect-ten SSRF bug in its Python SDK
A CVSS 10 flaw in the Cloud SDK for Python can hijack cloud credentials across multi-tenant applications.
An OpenAI engineer is charged over a bug hidden in a boardroom
Federal prosecutors say a recording device tucked inside a conference-room TV was meant to capture secret work on superintelligence.
Microsoft Patch Tuesday wave carries 1,413 fixes for October
October's update wave is the largest Microsoft has ever shipped, and one Windows Shell bug is already under attack.
Ivanti VPN chain exploits CVE-2026-104935 for root access
A previously unknown crew used a three-bug chain to take full control of fully patched Ivanti Connect Secure appliances.
XWorm turns from a remote-access tool into a live surveillance rig
Fresh plugins let the long-running Windows malware follow victims, listen through the microphone and ride their browser sessions.