News
-
Google brings Wiz runtime detection into GKE with managed preview add-on
Google Cloud has introduced a preview Wiz Runtime Sensor add-on for GKE, offering managed deployment of runtime monitoring across Standard and Autopilot clusters.
-
Microsoft and NVIDIA set out open-weight AI model risk assessment framework
Microsoft and NVIDIA have published guidance on assessing open-weight AI models in enterprise use, separating model-level evaluation from security controls around deployed applications and agents.
-
Microsoft leads Check Point phishing dataset as brand impersonation shifts towards AI tools
Microsoft accounted for 33% of brand impersonation attempts tracked by Check Point in the third quarter, while its research also identified lures involving AI developer tools.
-
Stolen school photographer memory cards prompt questions over pupil data handling
A theft from a school photography contractor’s vehicle may have exposed pupil photographs, names and class details, although the contractor says the original files may have been overwritten.
-
CERT Polska discloses Windows service control flaw in NordVPN
CERT Polska says a local permissions flaw in NordVPN for Windows before version 8.12 could let low-privilege attackers stop unprotected Windows services.
-
New NetScaler research details log poisoning and post-exploitation payloads
Zscaler researchers have published a technical account of exploitation of CVE-2026-88771 in Citrix NetScaler, including log poisoning and attempted web-shell deployment.
-
AOMEI backup software campaign used brief update-channel tampering to deploy backdoors
ManageEngine has detailed a supply chain intrusion in which attackers briefly altered AOMEI Backupper configuration to deliver malicious software through a trusted application channel.
-
NHS cyber alert warns BeyondTrust Remote Support flaw is being exploited
NHS England warns of active exploitation of a critical BeyondTrust Remote Support vulnerability that could let unauthenticated attackers upload files to affected appliances.
-
Microsoft issues workaround for Exchange instability after October Windows updates
Microsoft says some on-premises Exchange servers can become unstable after October Windows updates and has published a configuration workaround while it investigates.
-
Europol assessment identifies gaps in EU digital forensics capacity
A European Commission and Europol assessment says fragmented tools, specialist shortages and emerging data sources are complicating digital evidence collection across EU law enforcement.