Cybersecurity
Coverage of cybersecurity: data breaches and ransomware, software vulnerabilities, AI-driven threats and new security tools and guardrails.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, Hub: Ransomware & Cyber Attacks, Tech News, vulnerabilities, phishing, patching), each labelled with where it comes from. This view is not indexed by search engines.
UK and France Issue Pall Mall Process Industry Guidelines
The UK and France have issued voluntary, non-binding Pall Mall Process guidelines for the commercial cyber intrusion industry, endorsed by 14 countries.
Latest
CISA Adds Exploited Outlook Spoofing Flaw to Its KEV List
Microsoft lists an Outlook spoofing flaw as exploited. CISA added CVE-2026-124194 to KEV, with a 24 November deadline for federal agencies.
LNbits Urges Immediate Upgrade to 1.7.0 After Attacks
LNbits 1.7.0 is an urgent security update. Versions before it put funds at risk of theft. Upgrade before running; a patch alone is not recovery.
Xen Orchestra Auth Bypass Is Actively Exploited, Vates Says
Vates says a critical Xen Orchestra authentication bypass is being actively exploited and can lead to admin access and XCP-ng root takeover.
Vanta Agrees to Acquire Pillar Security for AI Governance
Vanta has signed a definitive agreement to acquire Pillar Security. The planned AI Governance product is due in January 2027; no price was disclosed.
NEAR AI Breach Exposed About 100 Users via SGLang Flaw
NEAR AI says an SGLang flaw let an attacker into one inference server, exposing about 100 users' details. NEAR Protocol was not affected. No CVE is named.
Cisco and IBM Plan to Add Claude Mythos to Security Tools
Cisco and IBM plan to add Claude Mythos to security products. Cisco says it is coming soon for select enterprises; IBM plans early 2027.
Chrome 157 Fixes Exploited XML Zero-Day CVE-2026-125350
Chrome 157 fixes an exploited XML zero-day, CVE-2026-125350. Update and relaunch now. Other Chromium browsers should watch for their own fixes.
CISA Adds IBM Aspera Faspex Flaw CVE-2026-123218 to KEV
CISA added IBM Aspera Faspex CVE-2026-123218 to KEV. Patch to 5.0.19.1; IBM lists no workarounds. CVSS says PR:N while IBM text cites an authorised user.
Vanderbilt Cyberattack Notice Orders Campus Device Shutdown
Vanderbilt University reports an active cybersecurity incident and orders device shutdowns. Ransomware and data-theft claims remain unverified.
France Attributes Fridge Cyberattacks to IRGC Shahid Kaveh
France attributes the October supermarket fridge cyberattacks to IRGC unit Shahid Kaveh. Focus on defence, warrants and sanctions—not attack theatre.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.