News
-
EU workplace cyber exposure remains widespread
Three quarters of EU employees encountered suspicious digital activity at work, while fewer than half said they could recognise AI-generated fake video.
-
FTAPI confirms ransomware on internal server
German secure file-transfer provider FTAPI says ransomware was deployed on an internal server, while its customer platform and transferred customer data were not affected.
-
Citrix exploitation reaches broad European sectors
Mandiant says exploitation of a NetScaler zero-day began weeks before disclosure and likely affected European organisations across government, finance, energy, education, technology, and legal services.
-
OpenInfra repository compromise puts packages in doubt
OpenInfra Europe has told users to remove packages downloaded from a compromised Artifactory repository after attackers obtained administrative access to the service.
-
Cloudflare exposes post-quantum TLS adoption gap
New Cloudflare telemetry will let customers inspect post-quantum TLS negotiation by connection, exposing a sizeable gap between browser-side adoption and encryption on connections to origin infrastructure.
-
Visa prepares for autonomous cyberattacks
Visa is redesigning parts of its defensive architecture around autonomous AI as the payments company prepares for attackers that can adapt and operate faster than conventional human-led response.
-
Google fixes critical Application Integration flaws
Google has disclosed three Application Integration vulnerabilities, including two critical flaws that allowed authenticated users to execute code or privileged internal requests from production infrastructure.
-
Cloudflare plans public certificate authority
Cloudflare has applied to major browser and operating-system trust programmes as it prepares to issue publicly trusted certificates and build post-quantum capability into its planned certificate authority.
-
Microsoft details NeedyMantis post-compromise malware
Microsoft has exposed a modular malware family used after attackers gain initial access, with observed victims spanning telecoms, universities, medical nonprofits, intergovernmental organisations, and government contractors.
-
Apple patches targeted CoreGraphics zero-day
Apple has patched a CoreGraphics flaw that can enable arbitrary code execution and says it may have been exploited in an extremely sophisticated attack against specific individuals.