Node2Shell puts Microsoft and Node.js on Brotli patch duty
A vulnerability in Google’s Brotli compression library could allow attackers to execute arbitrary code in applications that use an affected Brotli decoder to process compressed…
Latest Cybersecurity News — Page 76
View all →
What are the biggest cyberthreats heading our way in 2023?
From ransomware to crypto mining, keeping up with the rapid evolution of threat vectors in the cloud security landscape is no easy task. To help…
General Petraeus on Ukraine and the Shadow War
Winter is coming, and that means Ukraine has to gear up for another brutal season of strikes on its energy infrastructure – Russia’s bid to…
Apple backports CoreGraphics zero-day patches to older iPhones
Apple has backported security patches released last month to older iPhones and iPads, addressing a zero-day bug exploited in “extremely sophisticated” targeted attacks on iOS…
Critical HashiCorp Consul Kubernetes Flaw Allows Attackers to Gain Elevated Privileges
HashiCorp has released fixes for a Consul-k8s authorization bypass that could allow an attacker to gain elevated Consul privileges from another Kubernetes namespace. Tracked as…
HashiCorp Consul Vulnerability Allows Attackers to Bypass Authorization and Gain Elevated Privileges
HashiCorp disclosed a vulnerability in consul-k8s, a cross-namespace authorization bypass that could let attackers with limited Kubernetes permissions gain elevated Consul privileges. This vulnerability is…
Security Teams and AI Tools: Why Executives Won’t Adopt What They Can’t Control
AI is a hot topic for every business. You can’t avoid it, whether CEOs are discussing how to use it to improve productivity or the…
DreamHost incident triggers password resets, locks customers out of email and FTP accounts
DreamHost has brought its File Manager back online after an incident that disrupted several of its services, though some of its customers still can’t get…
Australia Gets Into Amadey Malware Backend, Cuts Off Access to 180,000 Infected Computers
Swati KhandelwalOct 27, 2026Malware / Cybercrime A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the…
Capita ‘comprehensively failed’ on Civil Service pension artificial intelligence promise
Artificial intelligence (AI) promises made to the government by outsourcer Capita failed to materialise, providing the “biggest learning” from an independent audit into the failed…
Columbia University Cyberattack: Data Not Sold, Probe Finds
An internal investigation into the June 2025 Columbia University cyberattack found no evidence that the stolen data was sold or distributed on the dark web,…
Southern Cross Credit Union asks AI agent to handle account balance requests
Key points Southern Cross Credit Union has deployed an AI agent called Nova to handle inbound calls from customers seeking account balances. Built in six…