Cybersecurity
Adobe Patches 140 Vulnerabilities Across 10 Products
The flaws affect products such as Commerce, Photoshop, ColdFusion, Substance 3D, Dimension, FrameMaker and Bridge.
Cybersecurity
Latest news
Cybersecurity
Google Partially Reverses Chrome Bug Bounty Cuts
Google is restructuring bug bounty rewards with a focus on complex memory safety vulnerabilities.
Cybersecurity
TFG London cyberattack disrupts systems at Hobbs and Whistles retailers
TFG London detected a cybersecurity incident that impacted IT systems used by the Phase Eight, Hobbs, and Whistles premium fashion brands.
Cybersecurity
GitHub Tightens npm Publishing After Flaw Left 1,500+ Packages Vulnerable to Hijacking
GitHub has taken the step of expiring unvalidated npm trusted publishing configurations 48 hours after creation after researchers found that it was possible for an attacker to push new versions of a different user’s package without having to steal their credentials.
Cybersecurity
Meta Says Hackers Took Code, Personal Data of 1,500 in GitHub Breach
Most of the affected individuals are Meta employees in the United States and they are being offered credit monitoring services.
Cybersecurity
Enable This Secret iOS 27 Feature to Help Protect Against Scams
Impersonation Risk Detection uses on-device analysis and simple risk warnings to help protect you from scams.
Cybersecurity
VPN dark web alerts vs. free tools: Are you paying extra for repackaged data?
Tracing where VPN breach data actually comes from
Cybersecurity
Ivanti warns of Connect Secure zero-day exploited in attacks
Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway.
Cybersecurity
Docker Hub flaw let attackers impersonate users, tamper with images
Docker has disclosed a critical vulnerability (CVE-2026-105445) in Docker Hub that let attackers access another user’s container repositories using a personal access token (PAT).
Cybersecurity
Hackers turn business backup servers into crypto mines after sneaking malware disguised as Microsoft Edge
At least five organizations were targeted by the malware in just a few days.
Cybersecurity
Ahold Delhaize takes systems offline after cyberattack — global retail giant says ‘cybersecurity incident’ hit systems, but stores remain open
Ahold Delhaize loses its hold on cybersecurity once again, as retailers report trouble operating.
Cybersecurity
The MFA Gaps Attackers are Still Exploiting
Attackers continue exploiting gaps in MFA coverage, using stolen credentials to access VPNs, RDP, and Windows systems that still rely on passwords alone. Specops explains why protecting cloud applications isn’t enough and how organizations can close these authentication gaps.
Cybersecurity
SAP warns of maximum severity OAuth2 SSRF security flaw
SAP has addressed 20 security flaws across multiple products in its October 2026 security updates, including a maximum-severity vulnerability in the Cloud SDK for Python.
Cybersecurity
Hacker claims ‘123456’ password let them breach the Danish national registry, accessing 8.8 million records
The Danish Central Register of Persons (CPF) was breached through the account of an IT and data services business. The hacker claimed that one of the breached accounts was only protected by a ‘123456’ password.
Cybersecurity
Xandr Fined a Record €8.6 Million for Relaying Grindr Data Revealing Sexual Orientation
The Norwegian Data Protection Authority (DPA) has fined Xandr, an advertising unit owned by Microsoft, €8.6 million ($9.62 million) for illegally relaying Grindr users’ sensitive data to advertisers.
Cybersecurity
I asked Google about its new multi-year partnership with Flo Health, in light of privacy concerns
Google assured me that its algos are ‘designed not to log or store sensitive women’s health-related events’.
Cybersecurity
Over 8.7 million karaoke fans at risk after major data breach — Japanese giant Nippon Columbia says malware infection was to blame for exposing records
Daiichi Kosho had outsourced the handling of its customers’ personal information to NCG.
Cybersecurity
Cyberattacks crank French supermarket refrigeration systems up to 50°C
Stock spoiled at hundreds of stores as manufacturer says affected equipment ran outdated firmware
Cybersecurity
[Webinar] How to Stop AI-Driven Privilege Escalation With Runtime Identity Controls
The dangerous part of a stolen identity isn’t always the initial login. It’s what an attacker can do with that access next. With AI accelerating reconnaissance, exploitation of vulnerabilities, and privilege escalation, attackers can move through systems faster than security teams can investigate.
Cybersecurity
‘123456’ password linked to Denmark data breach affecting 8.8M people
Local media reports three weakly protected accounts at small IT biz whose access to national register was abused
Cybersecurity
XWorm RAT Evolves Into Surveillance Platform
Expanded plugin count allows the malware to monitor users’ location, stream live audio, and interact with authenticated browser sessions.
Cybersecurity
LG Smart TVs Vulnerable to Pre-Auth Root Takeover From Local Network
Three vulnerabilities in LG’s webOS can be chained to give an attacker on the same local network root access to certain smart TVs without a PIN or any interaction from the owner. LG has issued a fix, according to an advisory published by SSD Secure Disclosure on October 12.
Cybersecurity
AI Turns Familiar Cyberattacks Into a Race Against Time
IBM’s Steve Wallin talks to SecurityWeek on the effect of AI-driven attacks on enterprise defenses.
Cybersecurity
The era of passwords is coming to an end
Without passwordless systems, threat actors will continue to undermine digital trust.
Latest digest
Week 41
EN
Popular stories
Sources
72 active sources
27 Turkish · 45 English
All sources
