EU Scrutinizes Booking.com for Security Lapses Amid Phishing Concerns
PremiumEU Commission will investigate whether Booking.com adequately protects customers from phishing and scam risks on its platform.
Friday, October 23
Wednesday, October 21
AI Platform Exploited for Global Cyberattacks on Over 100 Firms
Threat actors abused AI platform Cairn to gain persistent access and conduct financial theft across 100+ organizations.
ConnectWise Cloud Backup Breach Puts MSPs and Clients at Risk
ConnectWise suspends Cloud Backup after theft of API/M365 tokens; downstream MSPs and tenants at risk of unauthorized access.
eMudhra CA Key Breach Prompts Urgent Security Measures Across Browsers
Major vendors block eight compromised eMudhra intermediate CA keys, prompting emergency updates across browsers and platforms.
Monday, October 19
Microsoft Tackles Over 30 Security Vulnerabilities in Office Suite
PremiumMicrosoft patched two dozen remote code execution vulnerabilities in Office, plus information disclosure and bypass issues.
Unmasking the Impersonation Industry: A New Era of Phishing
PremiumPhishing has evolved into targeted criminal impersonation, requiring new detection, verification, and human-layer defenses.
ConnectWise Halts Cloud Backup Amid Microsoft 365 Security Breach
PremiumStolen ConnectWise Cloud Backup credentials allowed attackers to sign into 173 Microsoft 365 tenants, demonstrating supply-chain risk.
Friday, October 16
CISA Alerts on Ivanti and Microsoft Vulnerabilities Amid Record Patch Tuesday
PremiumCISA issues warning about newly exploited Ivanti vulnerability while Microsoft ships record-breaking Patch Tuesday fixes.
Critical Windows Shell Vulnerability Patched Amid Active Exploitation
PremiumMicrosoft patched actively exploited Windows Shell zero-day CVE-2026-96951 that bypasses Mark of the Web protections (CVSS 8.8).
Microsoft Cripples Global Phishing Network Responsible for Over a Billion Scams
PremiumMicrosoft disrupted a Chinese-language phishing ecosystem (Yam Store) responsible for over one billion scam messages.
Microsoft Sets New Record with Patch Tuesday, Addressing Over 1,400 Vulnerabilities
PremiumMicrosoft released fixes for 1,413 vulnerabilities including an actively exploited Windows Shell zero-day; prioritize high-severity updates.
Wednesday, October 14
Monday, October 12
Friday, October 9
U.S. Seeks Information on Chinese National Charged in Major Cyber Attacks
PremiumUS State Department offers up to $10M for information locating Zhang Yu, charged over the 2021 Hafnium Exchange Server attacks.
Congress Raises Privacy Concerns Over Google-Spirit Data Deal
PremiumLawmakers warn a proposed Google-Spirit AI training deal could include 100M emails and 500M Teams messages, risking sensitive exposure.
Wednesday, October 7
Nikkei Employee Emails Compromised in Security Breach
Nikkei reports attackers breached employee Microsoft and Google accounts, using one to send thousands of phishing emails.
ClickFix Attack Exploits Browser Cache to Deliver Malicious Payloads
ClickFix prefetches payloads into browser cache disguised as PNGs to bypass Run limits and execute malicious scripts.
Monday, October 5
Microsoft Urges Rapid Update for Critical Exchange Server Flaw
PremiumMicrosoft reissued Exchange Server V2 updates to fix CVE-2026-96940, an authz flaw allowing intra-org mailbox access and exfiltration risks.
TA419's Sophisticated Phishing Campaign Targets U.S. AI Policy Experts
PremiumTA419 is running Microsoft AitM-style phishing campaigns to steal credentials from U.S. AI policy experts at think tanks and universities.
Get these articles delivered to your inbox.
Subscribe free