Technology standards across Europe are evolving to prepare manufacturers for the EU Cyber Resilience Act (CRA) that takes full effect in December 2027. The European Telecommunications Standards Institute (ETSI), one of the three official standards organizations recognized by the EU,… Read More "ETSI Proposes 17 Cybersecurity Standards to Support EU CRA"
WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover
More than 40,000 WordPress sites have been exposed to an authentication bypass flaw in the User Profile Builder plugin that can let unauthenticated attackers access the site’s administrator account. The vulnerability, tracked as CVE-2026-15826 and given a critical CVSS rating… Read More "WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover"
UNISOC Modem Flaw Enables Remote Code Execution via Video Calls
A vulnerability in UNISOC modem firmware can allow arbitrary code execution with kernel privileges from the modem context, potentially allowing an attacker to modify Android kernel code. The flaw stems from a lack of isolation between modem memory and kernel… Read More "UNISOC Modem Flaw Enables Remote Code Execution via Video Calls"
Healthcare Giant McKesson Investigates Data Breach Incident
One of America’s largest healthcare distributors is investigating a serious data breach which notorious threat actor ShinyHunters has claimed responsibility for. Founded in 1833, McKesson provides wholesale medical supplies and pharmaceutical distribution to over 40,000 corporate and institutional customers. However,… Read More "Healthcare Giant McKesson Investigates Data Breach Incident"
Financial Stability Board Sounds the Alarm Over Frontier AI Risks
The global financial system is at risk as frontier AI models transform the cyber-threat environment, the Financial Stability Board (FSB) has warned. Chaired by the Bank of England governor, Andrew Bailey, the FSB is an advisory body that monitors for… Read More "Financial Stability Board Sounds the Alarm Over Frontier AI Risks"
White House Launches Pilot Program in Texas to Protect Water Infrastru
The White House has launched a new program to provide water systems with cybersecurity support and resources. Project Watershed 250 will be piloted in the State of Texas, governor Greg Abbott and White House national cyber director Sean Cairncross jointly… Read More "White House Launches Pilot Program in Texas to Protect Water Infrastru"
65% of Enterprises Have Seen AI Agents Act Out of Scope
AI agents have acted outside their intended scope at 65% of surveyed enterprises, with 29% reporting measurable organizational impact. The finding comes from Agents Without Guardrails, a research report from Enterprise Management Associates (EMA) compiled for Cequence Security and based… Read More "65% of Enterprises Have Seen AI Agents Act Out of Scope"
Attackers Steal METR API Key and Burn $600,000 in AI Credits
Attackers have stolen an API key from AI safety research organization METR and used it for three weeks to consume model credits that would have been worth about $600,000. METR disclosed the incident in a security update published on Aug… Read More "Attackers Steal METR API Key and Burn $600,000 in AI Credits"
FulcrumSec Claims Responsibility for Manchester Airport Group Breach
A threat group claiming responsibility for a breach of the UK’s largest airport group appears to have leaked almost all of the 550GB of data it stole online. FulcrumSec posted the data for download on its leak site, claiming to… Read More "FulcrumSec Claims Responsibility for Manchester Airport Group Breach"
Hackers Chain Two New SonicWall Zero-Day Vulnerabilities
SonicWall has notified customers of two new zero-day vulnerabilities that are being exploited in the wild, one of which is a maximum-severity flaw. A security advisory published by the vendor on September 1 revealed that the bugs affect SMA1000 appliances,… Read More "Hackers Chain Two New SonicWall Zero-Day Vulnerabilities"