News
-
Exploited FortiMail flaw allows arbitrary file writes
An exploited FortiMail path traversal vulnerability can allow unauthenticated attackers to write arbitrary files to affected email security appliances.
-
Apple tightens Full Disk Access as AI agents expand risk
Apple is preparing stronger controls around Full Disk Access in macOS, warning that increasingly autonomous AI agents increase the consequences of granting applications broad access to user data.
-
UK leads Europe in observed nation state cyber activity
Microsoft says the United Kingdom recorded Europe’s highest number of observed nation state cyber events during the period covered by its 2026 Digital Defense Report.
-
Epic pauses development after AI testing finds security flaws
Healthcare software provider Epic has paused much of its product development while it addresses security weaknesses identified during testing with Anthropic’s advanced cyber model.
-
UK scientists call for AI accident investigator
Nineteen UK computer scientists have called for an independent authority to investigate serious AI incidents and near misses using a model comparable to accident investigation in aviation.
-
German repression coalition investigates cyberattack
A coalition of German and diaspora civil society organisations has taken its website offline after a cyber incident and is investigating whether personal data was affected.
-
Belgian school breach exposes data on 4,200 people
Bernardusscholen in Oudenaarde says attackers compromised a backup server and stole personal information relating to around 3,550 pupils and 650 teachers.
-
CERT EU flags surge in stolen AI service access
CERT EU says cybercrime markets are increasingly trading stolen access to premium AI services while attackers also hijack cloud servers to run unauthorised AI workloads.
-
ENISA details how CRA cyber reporting now works
ENISA has expanded its guidance for the Cyber Resilience Act’s Single Reporting Platform, detailing how manufacturers and open source stewards submit vulnerability and incident reports across the EU.
-
Warlock expands SharePoint attacks into essential services
Researchers have linked continuing Warlock ransomware activity to SharePoint intrusions affecting a water utility, telecom provider, regional government body, and university.