Cybersecurity - Page 4
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, vulnerabilities, phishing, AI security, Japan), each labelled with where it comes from. This view is not indexed by search engines.
Latest
Treasure Factory Says Hackers Took 746,277 Customer Email Addresses
Japanese reuse chain Treasure Factory says a flaw in its home buy-back booking system let hackers take 746,277 customer emails. No card data was involved.
Brotli Flaw Rated 9.2 Critical Reaches Bun, Envoy, Istio and curl
The Brotli bug first patched in Node.js is rated 9.2 critical and also hits Bun, Envoy, Istio, curl and Python apps. Fixed versions and stopgaps.
UK Plans £165m AI Biosecurity Drive and £120m for AISI Before Budget
Ahead of next week's Budget, the Chancellor has set out £165m for AI biosecurity, £120m more for AISI and £130m for AI cyber defence. Here's what's in it.
Eye Security Disabled a Popcorn Time Updater to Head Off a Botnet
Eye Security says it quietly disabled a defunct Popcorn Time auto-updater (CVE-2026-30612) that could let anyone run code on millions of machines.
Microsoft Plans AI Phishing Detection in Teams From November
Microsoft says Teams will use AI to flag phishing on external first-contact chats from early November, with worldwide availability planned for December.
Cloudflare Adds Post-Quantum Lock to Keys That Must Stay in Region
Cloudflare's post-quantum GeoKey Manager, in closed beta, wraps customer keys with ML-KEM-768 so they unwrap only in a chosen region. GA due Q1 2027.
Korean Integrator Taekwang Admits OneDrive Account Data Leak
South Korean integrator Taekwang says personal data leaked from a Microsoft 365 OneDrive work account; a ransomware group's 263GB claim stays unverified.
PwC Confirms Cyber Incident at Vendor Hosting Staff Learning Records
PwC says a cyber incident hit a third-party vendor hosting employee learning records, but no client data. It would not comment on Everest's 590GB claim.
Bitcoin Core Ends Waits of Up to a Year for Bugs LLMs Can Easily Find
Bitcoin Core will ship fixes for bugs a simple LLM prompt could find to every maintained version at once, skipping embargoes of up to a year.
Ukraine’s PM Orders Every State Body to Form a Cyber Security Team
Ukraine's PM Serhiy Koretskyi has ordered all executive bodies to form cyber security teams, saying about ten Kyiv data centres were damaged in September.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.