Power BI phishing campaign drops rogue ScreenConnect clients
Attackers are abusing Microsoft Power BI to host phishing lures that slip past email security, before dropping multiple rogue ScreenConnect clients on victims’ machines to…
Month: October 2026
ShinyHunters Extorted Boeing Spin-off Prior to Arrests – Krebs on Security
A teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the…
The Pentagon Hopes to Speed Up ‘Kill Chain’ AI Buys With 5-Minute Videos
An under-the-radar procurement program led by the Department of Defense has been granting special statuses to would-be defense contractors that make it easier for the…
EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and…
Cybersecurity Awareness Month 2026: Cybercrime Costs The World $20M Per Minute
07 Oct Cybersecurity Awareness Month 2026: Cybercrime Costs The World $20M Per Minute Posted at 08:54h in Blogs by Taylor Fox This week in cybersecurity…
Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after…
Google issues Android security updates: who can get them and how
Google has published security fixes for Android. The October updates are available for Android operating system versions 14, 15, 16, 16-qpr2, and 17 where “qpr”…
The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow
The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and…
UK Supreme Court to decide whether to block ‘trivial’ data protection claims
The UK’s Supreme Court is to decide whether people bringing claims for breaches of data protection law will need to show they have a sufficiently…
CVE-2026-21589: Critical File Flaw Hits Atlassian Confluence
Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting Confluence Data Center and seven other self-managed products. The advisory, published on October 5,…
Unpatched server behind Vic student data breach
Key points A school’s delay in patching a critical server vulnerability, flagged by an Australian Signals Directorate alert on October 27 2025, led to a…
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal. The…