News
-
Pwn2Own Ireland researchers demonstrate weaknesses in connected and AI systems
Researchers competing in Cork demonstrated vulnerabilities across connected devices and AI infrastructure, with coordinated disclosure intended to give vendors time to release fixes.
-
UK and Germany agree partnership to counter sabotage and cyberattacks
London and Berlin have announced a counter-hybrid threat partnership covering cybersecurity, sabotage and protection of critical infrastructure, with implementation details still developing.
-
Russian-aligned UAC-0099 updates MATCHBOIL malware used against Ukrainian industry
ESET has traced changes to a downloader used by UAC-0099 against Ukrainian organisations, exposing sustained intrusion activity affecting industrial and essential-service environments.
-
UK identifies China-linked company behind international cyber intrusion infrastructure
Britain’s National Cyber Security Centre and international partners have linked a China-based technology company to infrastructure and services used in malicious cyber operations against organisations around th
-
Swiss pension fund investigates supplier breach affecting sensitive information
Swiss federal pension fund Publica is assessing a data leak associated with an attack on an external software supplier, as federal authorities investigate the incident and its consequences for information handl
-
Tensorlake compromise exposes AI development infrastructure to credential theft
A compromised release of the Tensorlake software development kit installed credential-stealing malware through an npm lifecycle script, exposing systems used to develop and run AI agents before their isolated e
-
Traefik fixes eight vulnerabilities across proxy software
Traefik has released fixes for eight security vulnerabilities capable of affecting data confidentiality, integrity, security controls and service availability.
-
WordPress 7.1.3 fixes seven security flaws
WordPress 7.1.3 fixes seven security weaknesses including stored cross-site scripting, SQL injection and unauthenticated disclosure of comments attached to private or unpublished posts.
-
Cisco fixes six NX-OS vulnerability classes
Cisco’s October NX-OS hardening release fixes six CVEs across its switching software, including access control and memory corruption classes carrying maximum CVSS scores of 9.8.
-
SonicWall fixes new SMA 1000 remote access vulnerabilities
SonicWall has issued fixes for new SMA 1000 vulnerabilities that can enable remote code execution, server-side request forgery and cross-site scripting.