Data & infrastructure
-
TP-Link provisioning flaws expose network control
Fifteen newly disclosed vulnerabilities show how weaknesses in automated TP-Link device enrolment could be chained against controllers, cloud services, credentials, and managed network infrastructure.
-
Apple renews challenge to UK encryption order
Apple has filed another UK legal challenge over a technical capability notice reportedly seeking access to encrypted iCloud backups belonging to British users.
-
INC linked to SonicWall exploitation campaign
Researchers have linked INC ransomware activity to attacks exploiting two SonicWall SMA 1000 vulnerabilities, although the vendor has not publicly attributed the campaign.
-
N-central attackers reached managed endpoints
Attackers exploited N-able’s N-central platform, obtained administrative access, and used its remote-control capability to connect to endpoints inside customer-managed environments.
-
UKGI file exposed officials’ work details
A UK Government Investments file containing management information and the work details of 51 officials remained publicly accessible for around 40 hours after a policy failure.
-
Liechtenstein attack exposes ownership register data
Attackers copied beneficial-owner data relating to around 31,000 legal entities, while Liechtenstein suspended several other government systems to check for wider exposure.
-
Amgen cloud breach exposed patient data
Amgen has declared a material cybersecurity incident after proprietary information and patient health data were exfiltrated from third-party cloud environments.
-
CosmosEscape crossed Azure tenant boundaries
A remediated Azure Cosmos DB vulnerability chain could have crossed tenant, regional, and network-isolation boundaries using a platform-wide credential.
-
Adform code targeted crypto wallet addresses
Malicious code delivered through Adform technology attempted to replace cryptocurrency wallet addresses copied by visitors to affected websites.
-
FlashStart expands DNS-layer protection
FlashStart 2026 adds DNS-layer malware protection, service-provider APIs, microservices architecture, and data sovereignty features for enterprises and managed providers.