News
-
DDoS attack disrupts European press freedom platform
A DDoS attack temporarily knocked Mapping Media Freedom offline, disrupting public access to a European database documenting threats and violations against journalists.
-
Liechtenstein reopens ownership register after cyberattack
Liechtenstein has restored restricted external access to its beneficial owner register more than two months after a cyberattack, with users initially required to identify themselves and use the system on site.
-
GitLab patches critical AI Gateway command execution flaw
GitLab has patched a critical vulnerability that could allow an authenticated Duo Agent Platform user to escape a prompt template sandbox and execute arbitrary commands on a self-hosted AI Gateway.
-
Italy fines IQVIA €7m over patient data
Italy’s privacy regulator has fined IQVIA Solutions Italy €7 million after finding that a health database covering around one million patients was not genuinely anonymous.
-
German experts challenge cyber defence bill
German experts have backed stronger national cyber capabilities while warning parliament that proposed active defence powers need clearer oversight, responsibilities and safeguards against collateral damage.
-
One in 16 new Amazon domains flagged as Prime Day approaches
Check Point Research says 6.5% of newly registered Amazon and Prime Day-related domains in September were malicious or suspicious as attacks against financial and consumer-facing organisations also increased.
-
Denmark breach exposes data on 8.8 million people
Denmark is investigating unauthorised access to its central population register after a private company’s legitimate connection was abused to obtain personal data relating to around 8.8 million registered people.
-
MLCommons maps privacy risks in autonomous AI agents
MLCommons has published a draft taxonomy for privacy risks created by autonomous AI agents, covering data collection, sharing, consent, interoperability, and accountability.
-
Fake Zoom installer deploys macOS backdoor
Jamf researchers have uncovered a fake Zoom installer that captures a Mac user’s password before launching a second stage backdoor connected to live attacker infrastructure.
-
Fortra fixes eight BoKS flaws in privileged access stack
Fortra has disclosed eight BoKS vulnerabilities, including critical weaknesses affecting Active Directory service account passwords, command execution, and memory safety.