Chronological technology intelligence ledger across all editorial desks
Oct 28, 2026A recent Shai-Hulud attack shows defenders need real-time visibility into production code and affected services to respond to supply chain compromises. ISC2 Strategic Congress 2026 — Denver — Depending on a software bill of materials (SBOM) ...
Oct 28, 2026Main bombing sis getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang. Threat actors are abusing Microsoft Teams' external chat functionality at scale, using IT-support imper...
Oct 28, 2026Breaking cybersecurity news, news analysis, commentary, and other content from around the world, with an initial focus on the Middle East & Africa, the Asia Pacific, Europe, and Latin America. Interpol's annual Operation Serengeti, now on its third ...
Oct 28, 2026A vulnerability in Brotli, Google's widely used open-source compression library, is putting a broad range of software at risk. ### About CVE-2026-111497 Alternatively known as "Node2Shell", "Broccoli2Shell" and "Brotli2Shell", CVE-2026-111497 is a ...
Oct 28, 2026Nearly seven in ten people affected by data breaches handled by Kroll were exposed through an outside supplier, according to its Data Breach Outlook 2026. Businesses rely on outside providers to store information, process transactions and operate so...
Oct 28, 2026The National Institute of Standards and Technology (NIST) has released a roadmap for moving to post-quantum cryptography (PQC), with earlier deadlines for certain sensitive federal systems. The report, Transition to Post-Quantum Cryptography Standar...
Oct 28, 2026Tailscale is getting ready to ship a client update that addresses privilege escalation weaknesses in Tailscale SSH. Details of the bugs went public over the weekend. Tailscale provides a mesh VPN service that uses the WireGuard protocol to connect a...
Oct 28, 2026The US cybersecurity agency CISA has added the Brotli vulnerability known as Node2Shell to its Known Exploited Vulnerabilities (KEV) catalog. Separately, two security firms say they have recorded exploitation attempts against their honeypots. Tracke...
Oct 28, 2026The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. On Monday, UNM Health, the university's healthcare provider, began temporarily limiting new pa...
Oct 27, 2026The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the ...
Oct 27, 2026Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that...
Oct 27, 2026Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. The KB5134133 update for Win...