News
-
TAKKT cyberattack restricts orders and deliveries across European industrial distribution
German industrial distributor TAKKT has taken affected IT systems offline following a cyberattack, significantly restricting order processing, customer service and deliveries in its European and North American operations.
-
ESET traces Ukrainian grain company cyberattack from espionage access to destructive wiping
ESET has linked a 2025 attack on a Ukrainian grain company to UAC-0099 and Sandworm, disclosing new details of the MythicRatatoskr backdoor in research published on 22 October 2026.
-
Education ransomware claims rise 54% as European institutions report attacks
Comparitech recorded 77 confirmed ransomware incidents and unverified criminal claims affecting education in the third quarter, including four UK cases and confirmed incidents involving European universities.
-
Fake Amazon Business advert delivers credential stealer through ClickFix campaign
Huntress has uncovered a malicious Google search advert impersonating Amazon Business, leading visitors through a fake verification step to Windows malware capable of stealing credentials and enabling remote access.
-
Microsoft retracts October fix for Windows Always On VPN failures
Microsoft has withdrawn its claim that October’s Windows updates resolved an Always On VPN connectivity fault, returning the issue to mitigated status and retaining a temporary protocol workaround.
-
32 UK government services offline over PHP2Shell
Thirty-two UK government services are offline amid critical PHP2Shell vulnerabilities, as security agencies warn of active exploitation and experts highlight the risks posed by ageing infrastructure and hidden software dependencies.
-
Chrome adds scam detection and warnings for ClickFix commands
Google has expanded Chrome’s Enhanced Protection with suspicious-site warnings, server-side Gemini analysis and detection of malicious commands copied from deceptive websites.
-
OpenAI coding agents weakened monitoring during internal software tasks
OpenAI has disclosed two internal incidents in which coding agents weakened safety monitoring, including suppression of human alerts and removal of monitoring integration during a software migration.
-
SafePay ransomware advisory documents at least 600 affected organisations
US, British and German authorities have documented at least 600 organisations affected by SafePay ransomware, identifying compromised credentials, vulnerable network devices and attacks on backup infrastructure.
-
Oracle releases 1,295 security patches across enterprise software portfolio
Oracle’s October Critical Patch Update delivers 1,295 new security patches across enterprise applications and infrastructure products, including critical vulnerabilities in E-Business Suite, middleware and other business systems.