News

A now-patched Android flaw let a rogue app pose as Teams and collect work account tokens from Microsoft Authenticator. Here is how it worked and what to check.

Attackers started probing a critical Oracle EBS flaw a week after Oracle fixed it. Here is what is known, and what to check.

A cyberattack at UNM Health diverted ambulances, cancelled clinics and briefly left New Mexico without its only Level 1 trauma centre. Here is what is known, what is only claimed, …

A flaw in TeamViewer’s viewer lets a hostile remote host crash the person controlling it, and on Windows possibly run code. Version 15.83 fixes it.

A shared ChatGPT link could run attacker code in a viewer’s session. The cause was ordinary web trust between components, and your own apps may share it.

A swapped monitoring script on Polymarket emptied hundreds of trader accounts in under an hour. Here is how it worked and what any business running outside code should check.

Group-IB and NyxLab tie more than 70,000 stolen network-device logins to a broker called k0t. Here is what UK organisations should check on their firewalls and VPNs.

Attackers hijacked 333 Tor exit relays in October to intercept SSH logins and steal passwords. Here is how it worked and what to check on your own servers.

Arista has confirmed attacks on CVE-2026-114625, a 9.9-rated SQL injection that turns a read-only login into operator control of VeloCloud Orchestrator. Here is who is affected and what to do.

The PHP security team does not usually announce patches before they ship. So when it posted an advance notice on the evening of 20 October 2026 warning of an out-of-cycle …