Is Online Privacy Possible? How Digital Identities Can Help
How can normal users increase their privacy, safety and security online? Over the last two decades, the internet quietly rebuilt itself around a business model…
Month: August 2026
What specifically allowed the agent to reach a real company’s systems during testing?
Wayne Anderson, Managing Director, Cybersecurity and Digital Innovation, BDO USA. First and foremost, the technical “walls” were reduced during the testing experience. One of the…
The Expiry Illusion: Why Fresh Evidence Can Still Be Wrong
In discussions about safety, assurance, and governance, evidence is often treated as a matter of age. A certificate issued ten years ago is viewed differently…
Critical N-Able PassPortal Extension Flaw Gives Attackers Full Password Vault Access
Cybersecurity researchers have revealed a critical vulnerability in N-able’s PassPortal browser extension that could have allowed a malicious website or embedded iframe to obtain authentication…
Nearly half of enterprises have no one leading PQC migration
Enterprises believe they are prepared for the security challenges posed by quantum computing, but gaps in ownership, testing and visibility could complicate their transition to…
Android Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy Botnet
Ravie LakshmananAug 21, 2026Malware / Automotive Security Cybersecurity researchers have flagged a new malware family that’s specifically designed to infect Android-based vehicle head unit firmware…
Datacentre planning must be part of broad digital and industrial system
There is no doubt the UK needs more computing infrastructure, but there remains uncertainty over the type of infrastructure necessary to deliver compute across the…
US warns Siemens PLC devices can be hacked
Key points Several US government agencies have warned that unidentified hackers are trying to breach Siemens devices used to monitor and operate water facilities and…
New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets
iAuthFlow V2 is a new phishing toolkit demonstrating the rapidly improving sophistication of phishing techniques. iAuthFlow V2 is a malware toolkit first seen on a…
GitLab Warns of Active Exploitation of Critical GraphQL Flaw
GitLab Warns of Active Exploitation of Critical GraphQL Flaw Pierluigi Paganini August 21, 2026 GitLab flaw CVE-2026-19478 is now under active exploitation, allowing unauthenticated attackers…
What we know so far about the hacking campaign against US water systems
Support is growing for stricter oversight and increased financial resources for utilities in the wake of a cyberattack spree, suspected to be the work of…
Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain
While supply chain threats have been quietly compounding over the past decade, the last 12–18 months have triggered a drastic shift in the scale and…