The UK’s National Cyber Security Centre (NSCS) has fully backed passkeys, stating that it should be “should now be consumers’ first choice of login”. This follows a shift over the last 12 months which saw the agency work closely the… Read More "NCSC Backs Passkeys, Hailing a New Era of Sign-in"
The University of Nottingham in the UK has confirmed suffering a data breach after the notorious ShinyHunters hacker collective leaked files stolen from the university’s systems. The University of Nottingham is a major research university in the UK, ranked among… Read More "University of Nottingham Confirms Breach After Hackers Leak Data"
Twenty years ago, almost to the day, Amazon Web Services (AWS) launched Simple Storage Service (S3). A few months later, the company’s Elastic Compute Cloud (EC2) service opened for public beta testing before rolling out officially in 2008. These events sparked the era of modern… Read More "Virtual machines, virtually everywhere – but not all protected"
Security researchers have discovered 10 new indirect prompt injection (IPI) payloads targeting AI agents with malicious instructions designed to achieve financial fraud, data destruction, API key theft and more. Threat actors achieve IPI by poisoning web content so that when… Read More "Researchers Uncover 10 In-the-Wild Indirect Prompt Injection Attacks"
Microsoft’s latest Patch Tuesday updates resolve an actively exploited Exchange Server vulnerability tracked as CVE-2026-42897. The tech giant warned Exchange users about zero-day attacks exploiting CVE-2026-42897 on May 14, when it provided temporary mitigations. CISA added the security hole to… Read More "Microsoft Patches Exploited Exchange Server Vulnerability"
Ravie LakshmananJun 11, 2026Developer Security / Software Supply Chain GitHub has announced what it said are “breaking changes” coming to npm version 12, one of which turns off install scripts by default to combat software supply chain threats. The changes… Read More "GitHub to Disable npm Install Scripts by Default to Stop Supply Chain Attacks"
“Fix the roof while the sun is shining.” – proverb Cybersecurity has a familiar way of saying the storm will come: “a breach is a matter of when, not if.” While the industry’s sternest maxim has probably never been more… Read More "What makes or breaks it"
Schools and universities across the globe experienced a sharp increase in attacks last year thanks to the combined threat from geopolitical tensions, ransomware and hacktivism, according to Quorum Cyber. The security service provider’s 2026 Global Cyber Risk Outlook for Higher Education… Read More "Cyber-Attacks Surge 63% Annually in Education Sector"
Silver Fox is back in Japan, spoofing tax and HR emails timed to the one season when no one thinks twice about opening them 27 Mar 2026 • , 4 min. read Japan has entered its annual tax filing and… Read More "How Silver Fox preys on Japanese firms this tax season"
Iranian state-aligned hackers have pushed a new backdoor through a mix of career-themed phishing and, for the first time, search engine poisoning, expanding their reach into the American aviation sector during the recent US-Iran military conflict. According to new analysis… Read More "Iran-Linked Hackers Target US Aviation with Phishing and SEO Poisoning"
