Cybersecurity - Page 24
Coverage of cybersecurity: data breaches and ransomware, software vulnerabilities, AI-driven threats and new security tools and guardrails.
Latest
Meta Says Stolen Login Exposed GitHub Code and Data on 1,500 People
Meta says an outside group used an employee's stolen login to take code from its GitHub repositories, plus personal data that should not have been there.
Docker Hub Flaw Handed Users’ Access Tokens to New Owners When Accounts Became Organisations; Docker Says It Is Fixed
A Docker Hub flaw, CVE-2026-105445, handed users' access tokens to new owners when accounts became organisations. Docker says it is fixed and saw no abuse.
Attackers Are Exploiting an Ivanti Connect Secure Zero-Day, and CISA Gives US Agencies Until 16 October to Act
Attackers are exploiting an Ivanti Connect Secure flaw, CVE-2026-104935. CISA added it to its exploited list on 13 Oct and told agencies to act by 16 Oct.
Lattice Sentry 5.0 Adds Post-Quantum Firmware Security for AI Servers
Lattice's Sentry 5.0 protects server firmware with post-quantum signatures and attestation. Lattice calls it an industry first. Demo boards are out now.
Google Meet Starts Using Post-Quantum Cryptography to Protect Calls
Google says Meet calls now use post-quantum cryptography on laptop web clients and meeting room hardware, with mobile support coming soon.
IMF Names an AI Market Correction, Rising Bond Yields and Cyberattacks as Near-Term Risks to Financial Stability
The IMF's October 2026 financial stability report names an AI market correction, rising bond yields and cyberattacks as near-term risks, Reuters reports.
SAP Fixes Maximum-Severity OAuth2 Flaw in Its Cloud SDK for Python in October 2026 Patch Day
SAP's October 2026 Patch Day fixes CVE-2026-89111, a CVSS 10.0 flaw in its Cloud SDK for Python that could leak OAuth2 credentials. Update to 0.45.2.
Marvell, Microsoft and Oracle Form OCP Group for Built-In Server HSMs
Marvell, Microsoft and Oracle have formed an Open Compute Project group to standardise a hardware security module built into each data-centre server.
Hundreds of Scientists, Including Geoffrey Hinton and Yoshua Bengio, Call for an International Body on AI Containment and Incident Reporting
Hundreds of scientists, including Geoffrey Hinton and Yoshua Bengio, call for an international body to set AI containment standards and log incidents.
Hobbs, Phase Eight and Whistles Owner TFG London Hit by Cyber Incident
TFG London says a cyber incident found on 11 October hit IT systems at Phase Eight, Hobbs and Whistles. Stores trade; a data probe is ongoing.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.