Critical flaw in EDK2 allows attackers to execute code early in the boot process.
Category: EN
Inside KeyDrift: Analyzing historical UAT-11473 activity on Cisco SD-WAN
Talos has identified UAT-11473, a highly sophisticated APT, who exploited CVE-2026-20127, an authentication bypass vulnerability in Cisco SD-WAN Catalyst…
Hive and Nefilim Ransomware Affiliate Gets 70 Months In Jail
Artem Stryzhak gets 70 months in prison for Hive and Nefilim ransomware attacks, while the FBI offers $11 million for his alleged co-conspirator. A…
WordPress 7.1.4 Patches Unauthenticated Upgrade-Window RCE; Exploitation Attempts Detected After Release
TL;DR: WordPress 7.1.4 was released on October 28, 2026. According to WordPress, it includes fixes for 22 security vulnerabilities. The most serious is an…
All the security risks Anthropic is worried about before its IPO
Anthropic has said out-of-control AI poses a threat to the world, but perhaps unsurprisingly suggests that profit will shape those decisions, too.
External Teams Chats Anchor 15-Minute Malware Delivery
Mail bombing is getting a new look with a wide-scale, ongoing social engineering campaign that might be tied to the Black Basta ransomware gang.
Polymarket halts trading after crypto-draining script breach, $2.5M traced
Prediction market platform Polymarket temporarily suspended trading on Thursday after hackers compromised a third-party service to distribute…
University of Copenhagen Breach Hits 525,000, Exposes Access PINs for 20,000
University of Copenhagen cyberattack exposes data of 525,000 people and access PINs for 20,000, raising concerns about identity theft and campus security.
php2shell: anatomy of two PHP lifecycle bugs
How out-of-memory corruption and stale worker state became two critical PHP RCEs and why the original exploit theory got it wrong.
27 arrests and 248 potential victims identified in action week against labour exploitation
Europol, the European Labour Authority (ELA), and 34 participating countries today announced the results of an action week targeting human trafficking for…
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog , based on evidence of active exploitation. CVE-2026-97229…
Watchdog Urges Police and Fire Service to Improve Cybersecurity
UK police forces and fire and rescue services have been urged to strengthen cybersecurity as rising cyber threats outpace current defenses
Massive Leak Exposes 41,000 Homeland Security Workers—Including Undercover ICE Agents
The leaked records include the locations of ICE and CBP facilities, workers’ cell phone numbers, and the members of groups tied to wiretap programs,…
CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
This post has no text preview — click the link below to read the original article. This article has been indexed from Blog Read the original article: CrowdStrike Achieves NCSC CIR Enhanced Level Assurance
Copenhagen University Breach Compromises Data on Half a Million People
Hackers have stolen personal information on over 520,000 people from the University of Copenhagen
Most Servers on the Planet Are Vulnerable to This Firmware Code-Execution Flaw
The critical flaw in UEFI firmware—used by most server vendors and data centers—allows attackers to execute code early in the boot process.
First ISC2 AI Security Certification Expected for Early 2027
ISC2 is seeking 3000 volunteers to enrol to a pilot exam phase for its upcoming AI security certification
Discord to let search engines index public server messages
Discord will allow search engines to index discussions in Discoverable Servers and make them accessible on the web to users outside the platform without…
CVE-2026-115415 – Secret masking bypass in the environment tool in Strands Agents Tools
Bulletin ID: 2026-154-AWS Publication Date: 10/28/2026 12:30 PM PDT Description: We identified CVE-2026-115415, an issue where the environment tool…
Oracle celebrates end of Cybersecurity Awareness Month with quadruple trouble
Attackers probe another EBS bug, and ShinyHunters’ PeopleSoft 0-day turns out to involve three vulns