120 stories on file from this desk.
No Image
Cybersecurity
1,042 words 5 min read
Attackers were working with a Fortinet mail gateway flaw before Fortinet said the flaw existed. The company published advisory FG-IR-26-175 on October 1, 2026, covering CVE-2026-104286, and confirmed that exploitation was already underway…
No Image
Cybersecurity
1,044 words 5 min read
More than 86,000 Fortinet firewalls are compromised across 194 countries, hackers just demonstrated 32 zero-day exploits at Pwn2Own Ireland, and a critical Atlassian vulnerability sits unpatched on thousands of servers. All of this…
No Image
Cybersecurity
2,134 words 10 min read
On Monday, October 6, 2026, Google's Chrome Secure Web and Networking Team published a disclosure with an unusual shape for a security incident. It did not begin with a bug. It did not begin with a phishing campaign or a malware family or…
No Image
Cybersecurity
2,390 words 11 min read
On the morning of Monday, October 5, 2026, Atlassian published a security advisory that did not look like the vendor's usual shape. Most Atlassian bulletins name one or two products. This one named eight: Bitbucket Data Center, Confluence…
No Image
Cybersecurity
1,802 words 9 min read
On Monday 5 October 2026, Denmark's Ministry of Research, Education and Digitalisation confirmed that unauthorised individuals had obtained the names, addresses and CPR numbers of roughly 8.8 million people registered in the country's…
No Image
Cybersecurity
1,697 words 8 min read
A ransomware crew with a name borrowed from fantasy and a tracking number borrowed from a government vocabulary has spent the last two months picking off some of the most consequential targets imaginable: the operator of a water utility…
No Image
Cybersecurity
1,624 words 8 min read
On 21 September 2026, the Canadian Centre for Cyber Security quietly amended a May advisory with a single sentence that changed its meaning entirely: "Open-source reporting indicates that CVE-2026-48842 is being exploited in the wild."…
No Image
Cybersecurity
2,037 words 10 min read
Two critical, unauthenticated vulnerabilities in internet-facing security infrastructure landed in the CISA Known Exploited Vulnerabilities catalog within 48 hours of each other this week, and the difference in how the two vendors…
1,590 words 8 min read
On October 1, 2026, Proofpoint published the first public report on a China-aligned hacking group it tracks as TA419 — and the group's chosen disguise was not malware. It was a mailing list of real, identifiable people whose credibility…
No Image
Cybersecurity
1,768 words 9 min read
For roughly nine months, a small number of unauthorized users had access to an unencrypted file-sharing system operated by the Defense Manpower Data Center, the Pentagon's records-keeping and identity management arm. The agency has now…
No Image
Cybersecurity
1,523 words 7 min read
Nine years after Spectre transformed processor security in 2017, a research group in Amsterdam has found a new way to abuse speculative execution — and this time the weak point is not a single application but the just-in-time compilers…
No Image
Cybersecurity
2,037 words 10 min read
The most interesting thing about the malware Microsoft disclosed on September 28 is what it is not. It is not a remote code execution exploit. It does not need a phishing email, a stolen password, or a vulnerability in any widely deployed…