Cybersecurity - Page 18
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Latest
US Charges 14 People Over Alleged North Korean IT Worker Scheme and Raids Texas “Laptop Farms”
The Justice Department has charged 14 people over an alleged North Korean remote IT worker scheme and seized about 187 devices in Texas laptop farm raids.
Microsoft Fixes a Windows Shell Zero-Day That Attackers Are Already Using
Microsoft's October update fixes CVE-2026-96951, a Windows Shell flaw attackers are already using to slip past Mark of the Web warnings. Update now.
AIR Security Says a Crafted Certificate Can Carry Secrets Past Vercel Sandbox’s Domain Allowlist
AIR Security says a crafted client certificate can carry secrets past Vercel Sandbox's domain allowlist. Vercel has not commented publicly.
Meta Says Stolen Login Exposed GitHub Code and Data on 1,500 People
Meta says an outside group used an employee's stolen login to take code from its GitHub repositories, plus personal data that should not have been there.
Docker Hub Flaw Handed Users’ Access Tokens to New Owners When Accounts Became Organisations; Docker Says It Is Fixed
A Docker Hub flaw, CVE-2026-105445, handed users' access tokens to new owners when accounts became organisations. Docker says it is fixed and saw no abuse.
Attackers Are Exploiting an Ivanti Connect Secure Zero-Day, and CISA Gives US Agencies Until 16 October to Act
Attackers are exploiting an Ivanti Connect Secure flaw, CVE-2026-104935. CISA added it to its exploited list on 13 Oct and told agencies to act by 16 Oct.
Lattice Launches Sentry 5.0, a Post-Quantum Firmware Security Stack for AI Data Centres
Lattice's Sentry 5.0 protects server firmware with post-quantum signatures and attestation. Lattice calls it an industry first. Demo boards are out now.
Google Meet Starts Using Post-Quantum Cryptography to Protect Calls
Google says Meet calls now use post-quantum cryptography on laptop web clients and meeting room hardware, with mobile support coming soon.
Workday to Acquire C1.ai, an Identity Platform for Managing What People and AI Agents Can Access
Workday has agreed to buy C1.ai, an identity platform that controls what employees and AI agents can access. Terms were not disclosed.
Meta, 14 Other Tech Companies and Law Enforcement Disrupt Scam Networks in West Africa
Meta and 14 other tech companies joined police from ten countries against West African scam networks. Law enforcement confirmed 28 arrests, Meta says.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.