Zendesk ticket systems hijacked in massive global spam wave
People worldwide are being targeted by a massive spam wave originating from unsecured Zendesk support systems, with victims reporting receiving hundreds of emails with strange…
Year: 2026
Cisco fixes Unified Communications RCE zero day exploited in attacks
Cisco has fixed a critical Unified Communications and Webex Calling remote code execution vulnerability, tracked as CVE-2026-20045, that has been actively exploited as a zero-day in attacks.…
Microsoft updates the security baseline for Microsoft 365 Apps for enterprise
Microsoft has published version 2512 of its security baseline for Microsoft 365 Apps for enterprise. The baseline documents recommended policy settings for Office applications used…
Editorial | Hong Kong needs constant vigilance to thwart cybercriminals
The pressing need to protect the public from cybercriminals is one of the biggest challenges facing governments around the world. Hong Kong is a prime…
Chainlit AI framework bugs let hackers breach cloud environments
Two high-severity vulnerabilities in Chainlit, a popular open-source framework for building conversational AI applications, allow reading any file on the server and leaking sensitive information.…
UK and China reach out across cyber no-man’s land
The British and Chinese authorities have reached out to one another to explore setting up a cyber security forum between the two countries, according to…
OAIC calls on federal agencies to be transparent on ADM use
The Australian Office of the Information Commissioner (OAIC) says that lack of disclosure around use of automated decision-making (ADM) systems across government agencies is putting…
Acting CISA chief defends workforce cuts, declares agency ‘back on mission’
Listen to the article 9 min This audio is auto-generated. Please let us know if you have feedback. The Cybersecurity and Infrastructure Security Agency’s acting…
GCVE launches as a decentralized system for tracking software vulnerabilities
A European cybersecurity organization has launched a decentralized system for identifying and numbering software security vulnerabilities, introducing a fundamental shift in how the global technology…
APRA to modernise data stack with Databricks on Azure
The Australian Prudential Regulation Authority (APRA) is set to modernise its data stack and governance architecture, underpinned by a new platform built with Databricks on…
Lawmakers probe CISA leader over staffing decisions
The acting head of the Cybersecurity and Infrastructure Security Agency faced pointed questions from lawmakers Wednesday over CISA personnel decisions and staffing levels. Members of…
Online retailer PcComponentes says data breach claims are fake
PcComponentes, a major technology retailer in Spain, has denied claims of a data breach on its systems impacting 16 million customers, but confirmed it suffered…