News
-
Romanian public bodies bought banned Kaspersky products, procurement review finds
An investigation identified 131 purchases of prohibited Kaspersky products by 83 Romanian public institutions after a government blacklist, raising questions about procurement enforcement.
-
Scottish NHS independent cyber audit funding ends, according to report
A report says Scottish ministers have stopped centrally funding annual independent cybersecurity audits of NHS health boards, while the government maintains that other oversight arrangements remain.
-
German CDU account sends 6,500 phishing emails after mailbox compromise
Police say attackers used a compromised account belonging to the CDU in Heilbronn to send approximately 6,500 fraudulent emails, including to political and government contacts.
-
Albert Heijn restores website and app after cyber incident, but online orders remain disrupted
Albert Heijn says customers can again access its website and Mijn AH app after a cybersecurity incident, while online grocery ordering has not yet returned to full service.
-
ConnectWise disables Cloud Backup identities after unauthorised access
ConnectWise suspended its Cloud Backup service and disabled seven application identities following unauthorised access, leaving partners to investigate possible activity inside Microsoft 365 tenants.
-
Check Point links 10,187 domains to concealed phishing infrastructure
Check Point identified 10,187 associated domains during a September scan of rotating phishing infrastructure that sometimes presents blank or error pages to visitors without the intended link.
-
NGINX patches five conditional web-server security vulnerabilities
New NGINX stable and mainline releases address memory corruption, HTTP/3 request handling and TLS session weaknesses, with each issue requiring a particular configuration or feature.
-
Aoki infostealer expands credential theft to AI coding assistants
Symantec researchers identify recent Aoki samples collecting AI coding assistant credentials. Separately supplied Black Duck commentary outlines potential downstream risks, not confirmed compromises.
-
Palo Alto Networks confirms limited attacks against PAN-OS management flaw
Palo Alto Networks says an authenticated management-interface flaw can give an attacker root-level execution and that very limited attempts have been observed.
-
Drupal fixes critical Field UI flaw with unauthenticated exploit path
Drupal has released security updates for a critical core Field UI vulnerability, explaining that contributed modules and custom code can make a remote execution path reachable without login.