A P2P botnet thought to have been running for over two decades, has suffered significant disruption thanks to a US-led law enforcement operation. Carried out on August 31, the operation against the Sality botnet brought together authorities from Bulgaria, Hungary,… Read More "International Operation Disrupts Sality P2P Botnet"
SonicWall and Splunk Patch Critical Vulnerabilities
Splunk and SonicWall on Wednesday announced patches for multiple critical- and high-severity vulnerabilities in their products, including flaws that could lead to arbitrary code execution. SonicWall rolled out fixes for four vulnerabilities in its SMA1000 appliances, urging users to update… Read More "SonicWall and Splunk Patch Critical Vulnerabilities"
Risk Prioritization: How Security Teams Decide What to Fix
Once exploitability is understood, security teams need to consider what the affected asset exposes. The same vulnerability may exist on a development server containing test data and, on an authentication, system providing access to sensitive business applications. The technical weakness… Read More "Risk Prioritization: How Security Teams Decide What to Fix"
Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks
Attackers behind a string of personal data leaks at Japanese organizations have abused APIs for mobile apps and targeted known software flaws, the JPCERT Coordination Center (JPCERT/CC) said. The Tokyo-based center, which takes incident reports, based its October 8, 2026… Read More "Japan Sees Sharp Rise in Web Data Leaks Amid Mobile API Abuse and Metabase Attacks"
Lessons for life: Why children’s data is a long-term identity risk
Your child’s first data breach may happen before they’ve even opened a bank account. Here’s how to keep their digital life safe. 03 Jun 2026 • , 6 min. read When we talk about cybersecurity and digital safety in the… Read More "Lessons for life: Why children’s data is a long-term identity risk"
FBI and Secret Service Warn of FortiBleed Lockout Threat
US cybersecurity authorities have urged administrators of Fortinet firewalls and gateways to harden their devices after revealing that the FortiBleed campaign is still ongoing. A warning notice published by the FBI and US Secret Service on October 6 cited SOCRadar… Read More "FBI and Secret Service Warn of FortiBleed Lockout Threat"
Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication
Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The attacks began shortly after technical details went public. Atlassian disclosed the bug on October 5 and gave it a CVSS score of 9.3. It… Read More "Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication"
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
Cybersecurity researchers have disclosed details of a targeted campaign aimed at South Korean financial organizations that used an artificial intelligence (AI) pen testing tool named ARTEX to carry out the attacks. The activity, per CrowdStrike Intelligence, was active from late… Read More "ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms"
Cybercriminals: the ‘auditors’ you never hired
There’s one cognitive bias that we humans are prone to, and it lies at the centre of some of the challenges that cybersecurity professionals face every day. It’s known as the normalcy bias – what Dr. Lauren Braithwaite defines as… Read More "Cybercriminals: the ‘auditors’ you never hired"
Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware
A Russia-aligned cyber espionage group has steadily upgraded its MATCHBOIL downloader over two years, adding stronger obfuscation, sandbox checks and changes to its execution and payload persistence. In new research published on October 8, ESET documented MATCHBOIL versions compiled or… Read More "Russia-Aligned UAC-0099 Evolves MATCHBOIL Malware"