Cybersecurity
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, vulnerabilities, phishing, AI security, Japan), each labelled with where it comes from. This view is not indexed by search engines.
US Charges Six Over Madagascar NFT Scam as Crypto Restraints Top $1bn
US prosecutors have charged six people over a Madagascar NFT romance scam, as the Scam Center Strike Force says it has now restrained over $1bn in crypto.
Latest
AWS Says Its KMS Now Supports 3 Post-Quantum ML-KEM Key Sizes
AWS says its Key Management Service now supports ML-KEM-512, -768 and -1024, the NIST post-quantum standard, in all KMS regions bar the Gulf and China.
So-net Says Hack Exposed 2.59m Records and 54,401 Mail Passwords
So-net's operator says a hack of its member database leaked 2,585,481 member records and 54,401 email passwords. The cause is under investigation.
Warp Says Vendor Hack Exposed Agent Data of Up to 1% of Users
Warp says attackers used a vendor flaw to reach agent trace and telemetry data. It puts the upper bound at about 1% of users. CrowdStrike is investigating.
Police Data Suppliers Hit by Multiple Cyberattacks, Inspectors Say
A UK inspectorate says cyberattacks compromised suppliers holding police data, and that most supplier contracts lack ongoing security checks.
Tailscale Readies SSH Patch After Researcher Reports Root-Access Flaws
Tailscale calls flaws in its SSH feature serious and targets a patched client by 27 October. Until then, it advises tighter access rules.
NIST Finalises Post-Quantum Plan, Deprecating RSA and ECDSA After 2030
NIST's final IR 8547 deprecates RSA, ECDSA and other quantum-vulnerable algorithms after 2030 and disallows them after 2035, backing new US deadlines.
Have I Been Pwned Says AfD Breach Exposed 345,439 Email Addresses
Have I Been Pwned has added the AfD breach: 345,439 unique email addresses plus email messages. The party blames an attack on a hosting provider.
SlowMist Urges Sites to Pull Tampered Udesk Script Swapping Addresses
SlowMist says a tampered script tied to Udesk's support widget steals session data and swaps crypto deposit addresses. Here is what sites should do.
Apple Patches Exploited CoreGraphics Flaw on Older iPhones and iPads
Apple has brought its fix for an exploited CoreGraphics flaw, CVE-2026-86950, to the iPhone XS, XS Max, XR and older iPads in iOS 18.7.11.
IBM Makes Agent Identity GA; Its AI Agent Kill Switch Is in Preview
IBM has made Agent Identity and HashiCorp Vault 2.2 generally available for AI agents, but its watsonx Orchestrate kill switch is still a tech preview.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.