Vulnerabilities
Vulnerabilities in Szafir software
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-93570, CVE-2026-93571 and CVE-2026-106036) found in Szafir software.
Latest
Vulnerabilities
Cyber Vulnerabilities Besiege Italy, Absent Clear Cause
Researchers can't quite explain why cyber threats look so different in Italy compared with everywhere else.
Vulnerabilities
Vulnerability in Wing FTP Server software
Path Traversal vulnerability (CVE-2026-105420) has been found in Wing FTP Server software.
Austrian doctors to swap emails and phone calls for encrypted messages
Austria is following Germany’s lead by introducing a sovereign encrypted messaging service for healthcare professionals
Vulnerabilities
Vulnerability in KGS Software tia Viewer software
Stored Cross-Site Scripting vulnerability (CVE-2026-105987) has been found in KGS Software tia Viewer software.
Data Breaches
Attack on email hosting provider for German far right party AfD exposed 345k accounts
Alternative für Deutschland swats away scandals as reporters swarm leaked email tranche
Sag om hacket iPhone ligner Trumps version af Hunter Bidens laptop-skandale
En iPhone tilhørende præsident Trumps svigersøn Jared Kushner, der angiveligt var hacket af både russiske og hollandske spioner, ser ud til at få en rolle i de afgørende dage af midtvejsvalget.
Vulnerabilities
Vulnerabilities in twofactor_gauthenticator plugin for Roundcube
CERT Polska has received a report about 3 vulnerabilities (from CVE-2026-107145 to CVE-2026-107147) found in twofactor_gauthenticator plugin for Roundcube.
Wiele podmiotów z branży foto udostępnia dane osobowe klientów bez logowania. Trzeba w końcu coś z tym zrobić.
Branża fotograficzna zarabia nie tylko na utrwalaniu ważnych chwil i podniosłych momentów, ale także na przetwarzaniu danych osobowych, choć zwykle to nie z tym fotografów kojarzycie. Dane osobowe, w tym wizerunek…
Et relativt kompliceret angreb: Sådan brød hackere ind i DTU's systemer
Ved at misbruge en gæstestuderendes konto lykkedes det på få dage hackere at udføre et it-angreb, der har ramt massevis af nuværende og tidligere ansatte og studerende på Danmarks Tekniske Universitet.
Vulnerabilities
EU makes progress towards PHP patching, UK lags behind
Five days into the PHP2Shell incident, and patch rates are creeping upwards, but the majority of publicly visible PHP hosts remain exposed
Vulnerabilities
Vulnerabilities in boneIO products
CERT Polska has received a report about 11 vulnerabilities (from CVE-2026-77052 to CVE-2026-77062) found in boneIO products.
Sådan fik Ingeniøren fat i data fra Novo-hackerne
Journalist Mats Magnussen udlægger her forløbet bag afsløringen af Novos hemmelige kartotek.Sagen om Novo Nordisks hemmelige kartotek over sundhedspersoner stammer fra det omfattende cyberangreb begået af hackergruppen…
Københavns Universitet med nyt om hackerangreb: Tusindvis af koder stjålet
20.000 medarbejdere og studerende har fået nye PIN-koder til deres adgangkort.
Vulnerabilities
2026-018: Critical Vulnerabilities in PHP
On 20 October 2026, the PHP project announced an upcoming security release addressing two critical vulnerabilities in PHP. Public reports indicated that these vulnerabilities could lead to remote code execution (RCE)…
Vulnerabilities
Med ét øje og solbriller: PHP-legende lappede huller under cyberkaos
Franske Remi Collet trodsede en nylig øjenoperation og opdaterede vitale PHP-arkiver, da kritiske sårbarheder truede med at ramme internettet. »Jeg kunne køre rettelserne (hvor det meste er automatiseret) med kun ét øje…
Vulnerabilities
Vulnerabilities in CGM CLININET software
CERT Polska has received a report about 11 vulnerabilities (CVE-2025-30043 and from CVE-2025-30045 to CVE-2025-30047, from CVE-2025-30049 to CVE-2025-30054 and CVE-2025-58403) found in CGM CLININET software.
Hackere udnytter cyberkaos: Sådan spotter du, om kriminelle har været forbi
Hvis man har mistanke om, at hackere har udnyttet onsdagens store PHP-hul, er der ingen vej uden om det store, tilbundsgående system-tjek. To eksperter giver deres bud.
Vulnerabilities
Vulnerability in MTW CleanShot X software
Deserialization of Untrusted Data vulnerability (CVE-2026-16477) has been found in MTW CleanShot X software.
Vulnerabilities
2026-019: Critical Vulnerability in GitLab Community and Enterprise Editions
On 21 October 2026, GitLab published a security advisory addressing several vulnerabilities among which a critical flaw that could allow an unauthenticated user to execute arbitrary code on a GitLab server. CERT-EU…
Vulnerabilities
PHP-sikkerhedsbrist varsler en ny tid: AI finder fejlene i vild skala
Vi er trådt ind i en ny tid i forhold til opdagelsen af sårbarheder i grundlæggende programmeringssprog og it-infrastruktur, siger dansk cyberlandstræner.
Vulnerabilities
Flaw in PHP computer language leads to shutdown of websites around world
Precautionary takedowns come as experts say bad actors could exploit vulnerability in language used by 70% of sitesWebsites around the globe have gone dark after a serious vulnerability was found in a computer language…
Cyberattack on French supermarkets tells us more about food security than AI safety
Experts know little about the motives of the hackers who remotely turned up the temperature on French supermarket refrigerators. Their methods, however, are far from science fiction.
Not cool: who hacked France’s supermarket fridges?
Whether it was youngsters proving their skills or state sabotage, Europe’s most hacked country was left with a mountain of waste after food began cooking in freezersShortly before midnight last Sunday, the digital…
Vulnerabilities
Vulnerability in NordVPN software
Incorrect Authorization vulnerability (CVE-2026-106030) has been found in NordVPN software.
Vulnerabilities
Vulnerability in Sparx Systems Enterprise Architect software
Improper restriction of XML external entity reference vulnerability (CVE-2026-88794) has been found in Sparx Systems Enterprise Architect software.
Data Breaches
Millions of phones exposed to Israeli spyware operation through online ads, researchers say
EU and NATO websites displayed online ads linked to Israeli hacking software.
Vulnerabilities
Vulnerabilities in Slican telephone exchanges
CERT Polska has received a report about 3 vulnerabilities (CVE-2026-35088, CVE-2026-63314 and CVE-2026-63315) found in Slican telephone exchanges.
Malware
2026-017: Critical Vulnerability in Cisco Secure Email Gateway
On 14 October 2026, Cisco published a security advisory addressing a critical vulnerability affecting the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway. This vulnerability could allow an…
EU’s cyber unit turns to AI to fend off ‘high-risk’ hacks
European Commission IT department wants to use AI to defend its systems from the most serious cyberattacks.