Data & infrastructure
-
EU expands IRIS² for defence resilience
The EU has expanded the planned IRIS² constellation to 348 satellites and accelerated deployment, adding capacity aimed at defence, security, emergency services, and sovereign government communications.
-
EU expands IRIS² for defence resilience
The EU has expanded the planned IRIS² constellation to 348 satellites and accelerated deployment, adding capacity aimed at defence, security, emergency services, and sovereign government communications.
-
LoadMaster flaw enters exploited catalogue
CISA has added critical LoadMaster command-injection flaw CVE-2026-8037 to its exploited-vulnerability catalogue, advancing the evidence beyond the unsuccessful attack attempts reported earlier this summer.
-
Zbtlink suspends sales after router backdoor report
Zbtlink has suspended sales and withdrawn affected software after researchers found a remotely controllable function across at least 20 router models, while the manufacturer disputes that it was intended for unauthorised access.
-
macOS Screen Sharing flaw bypasses authentication
Apple has patched a Screen Sharing authentication flaw as independent research describes a deeper pre-authentication route capable of reaching remote code execution on exposed, unpatched Macs.
-
TrueConf compromise turns updates into attack route
Kaspersky says attackers compromised unpatched TrueConf servers and replaced legitimate client installers with backdoored versions, extending exposure from server operators to organisations connecting through affected counterparties.
-
Metabase zero-day reaches n8n user data
A zero-day attack on Metabase Cloud reached data available through German automation company n8n’s analytics environment, exposing how an internal reporting dependency can become a route into user and credential information.
-
Oracle database becomes attacker execution layer
Huntress found attackers using SQL injection to place a post-exploitation toolkit inside an Oracle database and reach operating-system command execution on the underlying Windows server.
-
Critical Jenkins flaw crosses agent-controller boundary
A critical Jenkins vulnerability can allow a compromised agent or suitably privileged user to bypass a deserialisation safeguard and potentially execute code on the higher-trust controller.
-
TeamCity flaw moves into active exploitation
A critical TeamCity vulnerability has moved from disclosure to confirmed exploitation, increasing the exposure around on-premises build systems and the credentials and software pipelines connected to them.