Cybersecurity - Page 19
Cybersecurity news: data breaches, exploited flaws and the patches that fix them, plus police action, with what is confirmed and how to stay safe.
Latest
Trezor Cuts the Number of Shops Allowed to Sell Its Hardware Wallets
Trezor is cutting the number of shops authorised to sell its hardware wallets, saying it wants to check every partner closely. It names no countries.
SAP Fixes Maximum-Severity OAuth2 Flaw in Its Cloud SDK for Python in October 2026 Patch Day
SAP's October 2026 Patch Day fixes CVE-2026-89111, a CVSS 10.0 flaw in its Cloud SDK for Python that could leak OAuth2 credentials. Update to 0.45.2.
Marvell, Microsoft and Oracle Form an Open Compute Group to Put a Hardware Security Module Inside Every Server
Marvell, Microsoft and Oracle have formed an Open Compute Project group to standardise a hardware security module built into each data-centre server.
Sui Adds ML-DSA-65 Quantum-Safe Signatures in Its Latest Devnet Release
Sui's devnet-v1.82.0 release adds ML-DSA-65, a NIST post-quantum signature scheme, to its developer test network. Testnet and mainnet come later.
Germany Sets Its Post-Quantum Cryptography Timetable: High-Risk Systems to Switch by End-2030
Germany's BSI and two ministries publish a post-quantum cryptography guideline: high-risk systems to switch by end-2030, nearly everything by 2035.
MediaMarktSaturn Removes All Ledger Products From Its Stores and Online Platforms
MediaMarktSaturn says it has removed all Ledger products from its stores and online platforms after a buyer's tampering claims, unconfirmed by Ledger.
Hobbs, Phase Eight and Whistles Owner TFG London Hit by Cyber Incident
TFG London says a cyber incident found on 11 October hit IT systems at Phase Eight, Hobbs and Whistles. Stores trade; a data probe is ongoing.
Ontology Restarts Its Mainnet After a Roughly 41-Hour Precautionary Halt Over a Security Incident at an Unnamed Ecosystem Project
Ontology's mainnet is back after a 41-hour precautionary halt over an ecosystem project incident; it says the network lost no funds.
Ahold Delhaize Says Outage Came From ‘Malicious Actions of Others’
Ahold Delhaize says its mid-October outage came from 'the malicious actions of others' and has filed a Dutch police report. Stores stayed open.
GitLab Patches CVE-2026-97229, a CVSS 10.0 Flaw That Could Let an Unauthenticated User Run Code Through a Crafted CI/CD Regex
GitLab says CVE-2026-97229, a CVSS 10.0 flaw, could let an unauthenticated user run code via a crafted CI/CD regex. Self-managed: upgrade now.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.