Cybersecurity - Page 2
Coverage of cybersecurity: data breaches and ransomware, software vulnerabilities, AI-driven threats and new security tools and guardrails.
Latest
Contact Form 7 File Upload Flaw Fixed in Version 6.2.4
Contact Form 7 versions 6.2 to 6.2.3 let unauthenticated users upload files via a form field flaw. Vendor and NVD urge an upgrade to 6.2.4 for all users.
Chainalysis Restores Reactor and KYT After Breach Hit
Chainalysis restored Reactor, KYT and Address Screening on 7 November after password hashes and live tokens for all users were exposed.
CISA Adds FreeSWITCH Code Injection CVE-2026-116779 to KEV
CISA listed FreeSWITCH CVE-2026-116779 in KEV on 9 November with a 12 November due date. Versions through 1.11.2 are affected; 1.11.3 fixes it.
CISA Adds GPUStack Auth Bypass CVE-2026-102895 to KEV
CISA added GPUStack’s authentication-bypass flaw CVE-2026-102895 to its KEV list on 9 November, with a federal due date of 12 November 2026.
Tajani Seeks G7 Talks After Personal Data Appears on Dark Web
Tajani cyber threats prompt a request for G7 talks after Italy reports his personal data on the dark web. No attacker is identified in the statement.
Nepal Opens Joint Scam Centre With Round-the-Clock Helpline
Nepal’s scam centre joins police, banks and telecom providers, with 24-hour complaints and helpline 1247. Recovery results have not been reported.
Microsoft Previews Entra Agent ID Lifecycle Controls
Entra Agent ID previews lifecycle policies with fixed default inactivity actions and licensed custom rules. Microsoft advises against production use.
OpenAI and Hacktron Partner to Test Service Connections
OpenAI Hacktron partnership targets vulnerabilities at third-party service connections, with expanded Daybreak Red access for Hacktron researchers.
CISA Adds SonicWall SSLVPN Authentication Flaw to KEV
SonicWall SSLVPN CVE-2026-19868 joins CISA KEV. Valid alternate-method credentials may bypass SAML controls; federal action is due 20 November.
Keplr Says Some Social-Login Wallet Keys Were Breached
Keplr login via Google or Apple is paused after unauthorised-transfer reports. Web3Auth has paused embedded wallets; investigations continue.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.