Cybersecurity - Page 7
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Latest
Cisco Fixes 9.8-Rated Expressway Flaw That Allows Root Commands
Cisco has fixed CVE-2026-76466, a 9.8-rated Expressway flaw that could let an unauthenticated attacker run commands as root on clustered devices.
Capcom Says CAPCOM ID Breach Exposed 11.77 Million Email Records
Capcom says unauthorised access to CAPCOM ID exposed 11,774,247 email address records and let attackers change 196 passwords. No card data was taken.
DOJ Unit Lists $938m in Scam Crypto Restrained as Trump Touts ‘Nearly $1B’
A DOJ strike force says it has restrained $938.5m in crypto from Southeast Asian scams. That is not money returned, and the White House $1bn is unsourced.
ESET Links 2025 Wiper Attack on Ukrainian Grain Firm to Two Russian Groups
ESET says UAC-0099 broke into a Ukrainian grain logistics firm in July 2025 and handed access to Sandworm, which wiped its data in September.
Interpol-Led Africa Crackdown Nets 1,462 Arrests and Recovers $105m
Police in 21 countries arrested 1,462 suspects and recovered more than $105m in Interpol's Operation Serengeti III, which ran from June to August.
Oracle Ships 1,295 Security Patches in October, Most for Fusion Middleware
Oracle's October 2026 Critical Patch Update has 1,295 new security patches, 206 of them for Fusion Middleware. None is flagged as exploited in the wild.
Fisher & Paykel Healthcare Says Two Staff Email Accounts and Files Were Hacked
Fisher & Paykel Healthcare says an intruder accessed some company files and two staff email accounts. It says patient-data systems were not hit.
Yonsei University Says Portal Hack Exposed Data of About 10,000 Students
Yonsei University says a hack of its portal exposed student ID numbers, phone numbers and emails of about 10,000 students and graduates, Yonhap reports.
Kaspersky Says Lazarus Used Post-Quantum Crypto in Attacks on 3 Korean Firms
Kaspersky says a Lazarus campaign hit at least three South Korean firms and that its LPEClient malware uses ML-KEM-1024 post-quantum encryption.
GMO Says It Refused a $50m Extortion Demand After Desktop Cloud Hack
GMO says an attacker demanded US$50m after the Desktop Cloud hack, where 26,739 servers may be affected. It says it has paid nothing and will not comply.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.