News
-
AI enters the live intrusion chain
Check Point research documents AI performing operational work during live intrusions, while enterprise telemetry shows rising prompt injection and sensitive-data exposure through routine AI use.
-
US indicts alleged bulletproof hosting operators
US prosecutors have unsealed charges against three Russian nationals and two companies accused of providing infrastructure used in cybercrime affecting international victims.
-
Adobe warns ColdFusion flaw is exploited
Adobe says CVE-2026-48282 has been exploited in limited attacks against ColdFusion, with updates available for ColdFusion 2025 and 2023.
-
SAP fixes critical NetWeaver and Commerce flaws
SAP’s July Security Patch Day includes critical issues in NetWeaver Application Server ABAP, SAP Approuter, SAP Commerce Cloud, and NetWeaver Application Server Java.
-
Microsoft patches exploited AD FS and SharePoint flaws
Microsoft’s July security update includes exploited vulnerabilities affecting Active Directory Federation Services and SharePoint Server.
-
SonicWall warns SMA flaws are exploited
SonicWall says two SMA 1000 vulnerabilities are being actively exploited and is urging customers to upgrade, investigate, and reset credentials where needed.
-
UK expands public-sector vulnerability monitoring
UK Government Security says its Vulnerability Monitoring Service now covers more than 6,000 public-sector organisations and has expanded active scanning.
-
UK adds cyber risks to national register
The UK has added cyber attacks on data, water, and police infrastructure to the National Risk Register, alongside digital resilience failure after CrowdStrike.
-
Vastaamo hacker wanted after appeal fails
Finnish police have issued a wanted notice for Aleksanteri Kivimäki after the Supreme Court refused him leave to appeal his sentence in the Vastaamo case.
-
EU sets cyber plan for advanced AI
The European Commission has set out an action plan linking advanced AI, cyber defence, model evaluation, and existing EU laws including NIS2, DORA, and the Cyber Resilience Act.