Author
News Vulnerabilities & Zero-Days
From 13 October 2026, Microsoft stops new security updates for Office 2021, Office LTSC 2021, Windows 11 Home and Pro version 24H2, and Year 3 of Extended Security Updates for Windows Server 2012 and 2012 R2.
Jay B.
News Cyber Attacks
On 8 October 2026, attackers used two compromised open-source maintainer accounts to push a fake "Security Audit" GitHub Actions workflow into 345 repositories. The workflow sends repository secrets, and credentials found anywhere in the git history, to an attacker-controlled server.
Jay B.
News Data Breaches
Unauthorised parties obtained the names, addresses and CPR numbers of about 8.8 million people from Denmark's Central Person Register, the Danish government said on 5 October 2026. They misused a private Danish company's lawful right to search the register; that access has been stopped and police are investigating.
Jay B.
News Cyber Attacks
South Korean authorities have launched an investigation into a series of cyberattacks that exposed customer information at multiple financial firms. President Lee Jae Myung said details have emerged suggesting possible AI use in some hacking incidents, but authorities have not disclosed the specific AI tools involved or established the full scope of AI's role.
Jay B.
News Vulnerabilities & Zero-Days
Citrix has released emergency security updates for a high-severity NetScaler vulnerability, CVE-2026-88779, after confirming that attackers are exploiting the flaw in targeted attacks. The vulnerability can cause denial-of-service on affected NetScaler deployments using SAML authentication.
Jay B.