Belgium's tax agency confirms cyberattack, pulls services offline
Officials confirm this week’s tax deadlines extended to November as a result
Latest
UK surveillance watchdog ‘disappointed’ over government investigatory powers failings
Operational pressures do not reduce the need for lawful and consistent safeguards, says Investigatory Powers Commissioner’s Office
Vulnerabilities
Mattermost security advisory (AV26-1104)
Serial number: AV26-1104Date: October 29, 2026 As of October 28, 2026, Mattermost is affected by a vulnerability in the following product: Mattermost Prior to or equal to 11.10.0 Prior to or equal to 11.9.2 Prior to or…
Ransomware
IR trends Q3 2026: Actors impersonate IT help desks in vishing attacks as ransomware activity increases
Phishing remained the leading initial access technique, while percentage of ransomware and pre-ransomware cases increased. Finance and public administration tied as the top-targeted industries.
Vulnerabilities
n8n security advisory (AV26-1103)
Serial number: AV26-1103Date: October 29, 2026 As of October 28, 2026, n8n is affected by vulnerabilities in the following product: n8n Prior to 2.44.1 Prior to 2.43.5 The Cyber Centre encourages users and…
Data Breaches
Bluesky blocks links to leaked DHS employee data as government seeks takedowns
The social networking site is facing criticism for blocking access to the site, which identifies thousands of ICE agents and other employees working for Homeland Security.
Data Breaches
Massive leak exposes 41,000 DHS workers and undercover ICE agents
The leak reveals undercover agents, surveillance groups, and sensitive DHS access.
Shortlist of age checks for the UK's under-16 social media ban is out, 'some' adults will need verifying
Some adults may not need to prove it, but many will
Vulnerabilities
Hitachi Energy CoreTec Product
View CSAF Summary Hitachi Energy is aware of OS command injection and Dirty Frag vulnerabilities that affect CoreTec product versions listed in this document. Successful exploitation of these vulnerabilities could…
Zero-day
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2026-97229 GitLab Community Edition and Enterprise Edition Integer Overflow or…
Vulnerabilities
Siemens Mendix SAML Module
View CSAF Summary Mendix SAML module contains an authentication bypass vulnerability that could allow an unauthenticated remote attacker to gain unauthorized access by replaying a valid SAML assertion in IdP-initiated…
Vulnerabilities
Hitachi Energy TRO600 series products
View CSAF Summary Hitachi Energy is aware of multiple vulnerabilities that affect the TRO600 series product versions listed in this document. These vulnerabilities can be exploited for remote code execution (RCE) to…
Vulnerabilities
Attackers turn GitHub issues into supply chain campaign against 61 public repos in less than an hour
'The workflow automatically is triggered within a second, and if the workflow is indeed vulnerable, then the attack is executed successfully'
Vulnerabilities
Vulnerabilities in Szafir software
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
Malware
A Hacker Targeted High-Stakes Poker Players With Malware That Exposed Their Cards
Illicit software on the computers of some of the world’s best online poker players allowed the accused cheater to see what cards were in the victims’ hands—and trounce them at the tables.
Shadowy AI Relay Disables OpenAI Codex, Claude Code Sandboxes
The enigmatic service is providing popular AI coding tools to mainland China and other regions where OpenAI and Anthropic products are not officially for sale — but with key security features turned off.
Zero-day
NIK C2: The new AI-enabled command-and-control framework
Cisco Talos observed a new AI-integrated command-and-control (C2) framework in the wild called “NIK C2.”
Admin dropped the F-bomb in a password to show hackers who was really 1337
Cursing in login credentials can help keep the bad guys out, but not when the rest of your security is BS
Vulnerabilities
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Malware
Amatera: How the prolific infostealer works and spreads
The malware that topped ESET’s infostealer detections in Latin America in the first half of 2026 is an example of how cybercrime has professionalized
Data Breaches
Bluesky Is Blocking Links to a Major Leak of DHS Employee Records
Bluesky tells WIRED it blocked links to a leaked archive of information on 41,000 ICE, CBP, and other DHS workers because it contains people’s contact information, shared without their authorization.
Data Breaches
Non-profit group leaks data of more than 40,000 homeland security workers
Information released by Distributed Denial of Secrets is the third such government data disclosure in the last monthData identifying more than 41,000 employees and contractors for the US Department of Homeland Security…
Cloud & Identity
Upwind raises $400M after walking away from Datadog acquisition offer
The cloud security startup raised a Series C at a $3.8B valuation, instead of selling itself for the same price.
APT & Nation-state
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst Controller instances to bypass authentication and gain…
Vulnerabilities
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.
Hacker stole personnel data about thousands of Homeland Security employees, including CBP and ICE agents
A hacker obtained personally identifiable information about more than 40,000 Homeland Security staffers, which has since been published online.
Data Breaches
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs, Palantir software, and xAI’s Grok chatbot.
Zero-day
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters' PeopleSoft 0-day turns out to involve three vulns
Vulnerabilities
VMware security advisory (AV26-763) – Update 2
Serial number: AV26-763Date: July 30, 2026Updated: October 28, 2026 As of July 30, 2026, VMware is affected by vulnerabilities in the following products: Cloud Foundation 5.x 9.0.x.x 9.1.x.x Prior to 5.2.3 ESX Prior to…