Cybersecurity - Page 36
Coverage of cybersecurity: data breaches and ransomware, software vulnerabilities, AI-driven threats and new security tools and guardrails.
Stories from Cybersecurity come first, newest first, then stories from connected topics (Cybersecurity, Hub: Ransomware & Cyber Attacks, Tech News, vulnerabilities, phishing, patching), each labelled with where it comes from. This view is not indexed by search engines.
Latest
GCHQ Cannot Account for Thousands of Removable Media, IPCO Says
GCHQ removable media: the IPCO annual report says GCHQ estimates thousands of USB sticks, drives and discs are unaccounted for, years after it was raised.
WordPress 7.1.4 Fixes an Update Flaw Attackers Are Already Probing
WordPress 7.1.4 fixes a flaw in core updates that can lead to remote code execution, and Wordfence says attackers are probing it. How to check your site.
Drupal Warns Highly Critical Commerce Core Flaw Is Being Exploited
A highly critical Drupal Commerce access bypass, CVE-2026-118539, is being exploited. Update Commerce Core to 3.3.13 or 8.x-2.41 and audit orders.
Cursor Says Tampered Claude Code Extension Reached Up to 5,000 Users
A tampered Claude Code extension sat in Cursor's marketplace for about 11 hours on 29 October, reaching up to 5,000 users. How to check and clean up.
US Charges Five in ‘Ghost Student’ Aid Fraud Linked to Kenya
US prosecutors allege a ghost student fraud used stolen identities to claim federal student aid, with money mules sending funds to Kenya. Five are charged.
Trezor Warns CryptoBilis Buyers to Move Funds After Implant Report
Trezor tells anyone who bought a Trezor from CryptoBilis since March 2026 to move funds to a new seed, after a reported implant it treats as credible.
FBI Names North Korea in $6bn+ Binance Hack as Withdrawals Reopen in Phases
Binance estimates a security incident's impact at about $6.3bn and says it will cover all losses. About $3bn is frozen on-chain; withdrawals stay paused.
Polymarket Halts Trading, Says a Third-Party Provider Was Compromised
Polymarket put its international exchange into cancel-only mode on 29 October, saying a third-party provider was compromised and users would be made whole.
Alpine Linux Rebuilds Its GitLab After Attack on CVE-2026-97229
An attacker came close to exploiting CVE-2026-97229 on Alpine Linux's GitLab. Alpine rebuilt it and says self-built GitLab also needs a Ruby fix.
Arara Says Hackers Took 3.01m Email Addresses From Its Mail Service
Paycloud unit Arara says attackers exploited a web server flaw and took about 3.01 million email addresses held by companies using its mail service.
Latest on TSN
Explore the TSN Atlas: Every topic we cover, mapped. Click a bubble to dive in.