News
-
European manufacturing ransomware victims rise sharply
Black Kite recorded an 85.4% increase in European manufacturing ransomware victims, while Germany’s count rose by more than 83% during the first seven months of 2026.
-
NightEagle cyberespionage expands into Russian industry
Kaspersky says NightEagle has moved beyond its previously observed Asian target set, compromising Russian manufacturing and construction organisations through stolen VPN credentials and Exchange servers.
-
France prepares critical infrastructure hybrid-threat plan
President Emmanuel Macron has ordered a plan to strengthen protection of French critical infrastructure and sensitive sites against cyber and drone attacks.
-
TanStack compromise exposed CrowdSec repositories
CrowdSec says an OAuth token compromised through the TanStack supply chain incident was used to clone around 170 private repositories from a departing employee’s account.
-
North Korean WaterPlum campaign hits 30,000 devices
A multinational advisory links the WaterPlum recruitment campaign to North Korea and says it compromised at least 30,000 devices across more than 100 countries.
-
Softcat buys GDT in $1.05bn deal
Softcat has agreed to acquire US infrastructure provider GDT for $1.05bn, expanding its multinational capability across networking, data centres, AI infrastructure, cybersecurity, and technology procurement.
-
Check Point patches root-level management flaw
Check Point has patched a critical stack overflow that can allow an unauthenticated remote attacker to run arbitrary code as root on security-management and logging systems.
-
NCSC sets adversary simulation assurance standard
The NCSC has published the first standards for its assured Cyber Adversary Simulation scheme, creating a procurement benchmark ahead of its planned November launch.
-
Revolut breach shifts into alleged extortion
Attackers claiming responsibility for Revolut’s customer-data breach have reportedly demanded $3 million, while the fintech says it has received no direct contact or ransom demand.
-
Cisco ISE auth bypass exploited in attacks
Cisco has patched a maximum-severity authentication bypass in Identity Services Engine that is being actively exploited and can give unauthenticated attackers access to network-control infrastructure.