blog

Unauthorized parties gained access to the names, addresses and personal identification numbers of roughly 8.8 million people held in Denmark’s Central Person Register (CPR), the country’s Ministry of Digitalisation announced on October 5. The…

The Qilin ransomware group has claimed a Japanese electronics manufacturer as a victim, and the leaked material is not the usual HR and finance files. It includes broadcasting system design specifications and internal system…

Spanish police have arrested a 16-year-old suspected of running the KillSec ransomware-as-a-service operation and seized its servers and leak site, while US prosecutors have separately charged a Dutch national accused of helping the group…

An npm supply chain attack that started with a single compromised library, keyv, has spread to at least 868 packages carrying a combined total of more than two billion monthly installs. The attack begins…

Google has confirmed active, targeted exploitation of a zero-day affecting Pixel smartphones, and this one sits deeper than the usual app-layer bug: it is in the modem. CVE-2026-58704 resides in the device’s modem subcomponent…

Google has patched the sixth actively exploited Chrome zero-day of 2026, and the bug lives in the same place most of the serious ones do: the V8 JavaScript and WebAssembly engine. CVE-2026-85046 is a…

WordPress shipped a fix for a critical local file inclusion flaw on September 22. The first exploitation attempt was recorded the same day, at 11:49 UTC. Within hours it had moved from reconnaissance to…

CISA has added a critical authentication bypass in Cisco Catalyst SD-WAN Manager to its Known Exploited Vulnerabilities catalog, confirming that attackers are already using it in the wild. CVE-2026-76504 carries a CVSS score of…

You can trigger a critical SQL injection in Cisco Secure Email Gateway just by sending someone an email. No login, no link to click, no attachment to open. The email itself is the exploit.…

Cisco Identity Services Engine, the box that decides who and what gets onto your network, had an authentication bypass that scored the maximum possible CVSS: 10.0 out of 10. CVE-2026-76460 sits in an API…