Latest news
Fresh reporting on active vulnerabilities, security patches, incident response, and threat research for defenders.
Tata said production was unaffected, but the 630GB dump shows pure-extortion crews extracting leverage from contract manufacturers instead of encrypting them.
Convicted of aggravated data breach and mass patient extortion, Kivimäki is believed to be outside Finland as authorities move to return him to Vantaa Prison.
BlueHammer is a time-of-check to time-of-use race, not memory corruption. Estates below Antimalware Platform 4.18.26030.3011 face an operational deadline.
Across 661 incident-response cases, 67 percent of root causes were identity-related — a decisive shift in where ransomware defence budgets should now sit.
Reactor core systems were untouched, but a multi-tenant engineering document store became a single point of failure for the Kudankulam project's supplier graph.
When every participant on the call except the victim is synthetic, conventional MFA and human verification stop being controls. Assurance has to move upstream.
September 2026 is not full CE compliance. It is the first continuous, enforceable duty to detect and report actively exploited vulnerabilities.
Accenture confirms an isolated Azure DevOps breach after 35GB of source code, PATs, keys and credentials were listed for sale—raising major supply-chain risk for clients.