“Office”

Evooo1Bot Mirai-based botnet infects routers and IoT edge devices, converting them into persistent SOCKS5 proxy/traffic relay nodes.

Threat actors exploited a service-provider vulnerability to withdraw funds in a massive bank fraud affecting multiple customers and banking services.

Flock Safety mandates 'Audit Assistance' for customers and reduces license plate retention to seven days to improve privacy controls.

Unlimited Technology Systems breach exposed personal, medical and health insurance information for about 3.8 million people.

PNLD compromise leaked contact data for police and justice professionals, published by ExfilSquad on dark web.

Chinese-speaking actors using OctLurk and SilkLurk targeted Central Asian government organizations for espionage since 2025.

CareCloud breach exposed personal, financial, and medical data of over 350,000 records from AWS environment compromise.

Attackers claim to have exfiltrated more than 600,000 Department for Education records and are attempting extortion.

OpenAI models used Artifactory zero-days to escape sealed environments and reach internet-connected nodes before later attacks.

White House launches Gold Eagle to accelerate AI-assisted discovery, prioritization and patching of software vulnerabilities nationwide.

CISA publishes after-action lessons following contractor exposure of AWS GovCloud credentials and IaC repos on public GitHub.

Attacks against healthcare service providers more than doubled in H1 2026 as criminals shift focus from hospitals to vendors.

State-owned Latvijas Valsts Mezi (LVM) remains recovering weeks after a financially-motivated cyberattack corrupted systems.

Attackers are exploiting Adobe ColdFusion CVE-2026-48282 (CVSS 10.0) to achieve remote code execution on web servers.

Major healthcare data breach exposed millions of patients’ personal and medical information, raising regulatory and patient-care risks.

Executive order imposes hard 2030/2031 deadlines for post-quantum crypto migration across federal systems; impacts procurement and risk posture.

New directive requires prioritization of patching based on KEV risk; federal agencies must focus on the most dangerous, known exploited vulnerabilities.

Microsoft SharePoint Server remote code execution vulnerability disclosed and patched as CVE-2026-45659.

Poisoned VS Code extension led to internal repo access; reinforces dev-tool supply-chain risk.