Chronological technology intelligence ledger across all editorial desks
Oct 28, 2026Tailscale is getting ready to ship a client update that addresses privilege escalation weaknesses in Tailscale SSH. Details of the bugs went public over the weekend. Tailscale provides a mesh VPN service that uses the WireGuard protocol to connect a...
Oct 28, 2026The US cybersecurity agency CISA has added the Brotli vulnerability known as Node2Shell to its Known Exploited Vulnerabilities (KEV) catalog. Separately, two security firms say they have recorded exploitation attempts against their honeypots. Tracke...
Oct 28, 2026The University of New Mexico Health Sciences Center disclosed a cyberattack that caused system outages and disrupted patient care and academic activities. On Monday, UNM Health, the university's healthcare provider, began temporarily limiting new pa...
Oct 27, 2026The GoAhead embedded web server loaded a certificate revocation list into its default TLS backend but never turned revocation checking on, so a revoked client certificate could still pass login on affected setups. The flaw is in builds that use the ...
Oct 27, 2026Apple on Monday backported fixes for a high-severity security flaw that was exploited in real-world cyber attacks to older devices. The vulnerability, tracked as CVE-2026-86950 (CVSS score: 8.8), is an out-of-bounds write affecting CoreGraphics that...
Oct 27, 2026Microsoft has released out-of-band (OOB) Windows updates to remove trust in certificates tied to compromised eMudhra certificate authority keys, protecting systems that do not receive automatic certificate trust updates. The KB5134133 update for Win...
Oct 27, 2026Small and rural healthcare organizations are among the most vulnerable critical infrastructure organizations in the nation. The U.S. government will help protect rural hospitals from cybersecurity threats as part of a new pilot program that could ge...
Oct 27, 2026Security researchers and U.S. government authorities have seen what appears to be the first successful exploitation of critical vulnerabilities in PHP. For more than a week, hackers have attempted to exploit a memory-corruption vulnerability, tracke...
Oct 27, 2026An attacker who gained access to Keystone's website obtained the key that its hardware wallets use to prove they are genuine, the company said in a statement on October 26. Someone with that key could build counterfeit devices that pass the online c...
Oct 27, 2026Microsoft has fixed a flaw in its Authenticator app for Android that let a malicious app with no permissions pose as a trusted Microsoft app, such as Teams, and collect sign-in tokens for a victim's work account. Microsoft tracks the flaw as CVE-202...
Oct 27, 2026A criminal using the Amadey malware can no longer access or steal data from 180,000 infected computers around the world, including some in Australia, the Australian Signals Directorate (ASD) says. The agency's operators gained access to the criminal'...
Oct 27, 2026The North Korea-linked Lazarus Group has been attributed to a cyber espionage campaign dubbed Operation FlashHole targeting at least three organizations in South Korea spanning the construction, software, and wire-communication equipment manufacturin...