EY Data Breach Exposes Goldman Sachs and Man Group Clients’ Tax and Financial Data
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and…
Year: 2026
Cybersecurity Awareness Month 2026: Cybercrime Costs The World $20M Per Minute
07 Oct Cybersecurity Awareness Month 2026: Cybercrime Costs The World $20M Per Minute Posted at 08:54h in Blogs by Taylor Fox This week in cybersecurity…
Exploitation attempts against critical Atlassian flaw have begun (CVE-2026-21589)
One day after Atlassian released patches fixing a critical arbitrary file access vulnerability (CVE-2026-21589) in its self-managed Data Center products, and a few hours after…
Google issues Android security updates: who can get them and how
Google has published security fixes for Android. The October updates are available for Android operating system versions 14, 15, 16, 16-qpr2, and 17 where “qpr”…
The Sixth Voice of the CISO Data Shows Cyber Risk Has Moved Inside the Workflow
The 2026 findings are not just a year-over-year shift. They mark the latest point in a five-year arc where resilience, AI governance, human risk, and…
UK Supreme Court to decide whether to block ‘trivial’ data protection claims
The UK’s Supreme Court is to decide whether people bringing claims for breaches of data protection law will need to show they have a sufficiently…
CVE-2026-21589: Critical File Flaw Hits Atlassian Confluence
Atlassian has disclosed CVE-2026-21589, a critical arbitrary file access vulnerability affecting Confluence Data Center and seven other self-managed products. The advisory, published on October 5,…
Unpatched server behind Vic student data breach
Key points A school’s delay in patching a critical server vulnerability, flagged by an Australian Signals Directorate alert on October 27 2025, led to a…
Georgia Power, Alabama Power Data Breach Hits 400,000 Accounts
Southern Company is notifying roughly 400,000 customers that their utility account information was accessed by an unauthorized third party through its online customer portal. The…
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away
FortiBleed hit 86,000 firewalls by exploiting something nobody can patch away Pierluigi Paganini October 07, 2026 FBI and Secret Service warn FortiBleed, a credential-harvesting campaign…
Beyond asset discovery. Real-life CrowdRecon use case explored
Security teams have more ways than ever to map assets, scan infrastructure, and track vulnerabilities. Yet one question often remains difficult to answer: what does…
Encrypted instructions trick Copilot CLI into spilling developer secrets
GitHub Copilot CLI can be made to read sensitive files from a developer’s machine and send their contents to an attacker from a single web…