Cybersecurity - Page 16
Coverage of cybersecurity: data breaches and ransomware, software vulnerabilities, AI-driven threats and new security tools and guardrails.
Latest
Interpol-Led Africa Crackdown Nets 1,462 Arrests and Recovers $105m
Police in 21 countries arrested 1,462 suspects and recovered more than $105m in Interpol's Operation Serengeti III, which ran from June to August.
Oracle October CPU Ships 1,295 Patches, Led by Fusion
Oracle's October 2026 Critical Patch Update has 1,295 new security patches, 206 of them for Fusion Middleware. None is flagged as exploited in the wild.
Lazarus Used Post-Quantum Crypto in Korean Attacks, Kaspersky Says
Kaspersky says a Lazarus campaign hit at least three South Korean firms and that its LPEClient malware uses ML-KEM-1024 post-quantum encryption.
GMO Says It Refused a $50m Extortion Demand After Desktop Cloud Hack
GMO says an attacker demanded US$50m after the Desktop Cloud hack, where 26,739 servers may be affected. It says it has paid nothing and will not comply.
Railway Says Attacker Decrypted Some Customer Environment Variables
Railway says an attacker may have decrypted some customers' environment variables, which can hold API keys, and tells every user to rotate their secrets.
Microsoft Says AI Agents Tried 2,250 Tenants After ConnectWise Breach
Microsoft says China-aligned Storm-0940 used the ARTEX agent framework to try to sign in to 2,250+ tenants via ConnectWise Cloud Backup credentials.
NEC Contractor Hack Exposed Data on 77,851 People at Osaka University
Hackers used an NEC contractor's real accounts to encrypt Osaka Metropolitan University's servers and leak files on 77,851 Osaka University people.
Node.js Fixes Four High-Severity Flaws, Including a Brotli Bug
Node.js 22.23.4, 24.22.1 and 26.12.1 fix four high-severity flaws, including a Brotli decoder bug the project says permits remote code execution.
Malicious LiteLLM Release on PyPI Stole Credentials, Researchers Say
LiteLLM 1.107.0 on PyPI carried a credential stealer and backdoor, SafeDep says. LiteLLM is treating it as SEV-0 and says to pin version 1.106.2.
Fearless Wallet Extension Leaked Users’ Private Keys, Polkadot Says
The Polkadot Community Foundation says four Fearless Wallet browser extension versions sent private keys to an attacker. Users should move funds now.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.