You probably can’t trust your password manager if it’s compromised Summary Researchers from ETH Zurich and Università della Svizzera italiana examined the “zero-knowledge” promises of Bitwarden, LastPass and Dashlane and…
Google patches Chrome zero-day as in-the-wild exploits surface Summary Google has issued an emergency patch for a high-severity Chrome zero-day (CVE-2026-2441) after evidence of in-the-wild exploitation emerged. The flaw is…
Attackers finally get around to exploiting critical Microsoft bug from 2024 Summary A critical SQL injection flaw in Microsoft Configuration Manager (CVE-2024-43468), patched by Microsoft in October 2024, is now…
Microsoft Under Pressure to Bolster Defences for BYOVD Attacks Summary Over the past year threat actors — notably ransomware groups — have stepped up use of bring-your-own-vulnerable-driver (BYOVD) attacks to…
Nation-State Hackers Put Defence Industrial Base Under Siege Summary Nation-state actors increasingly treat cyberspace as a theatre of persistent operations aimed at the defence industrial base (DIB). Recent analyses from…
CISA orders federal agencies to patch exploited SolarWinds, Apple, Microsoft bugs within weeks Summary The US Cybersecurity and Infrastructure Security Agency (CISA) has added ten new vulnerabilities to its Known…
China may be rehearsing a digital siege, Taiwan warns Summary At the Munich Cyber Security Conference, Yuh-Jye Lee, a senior adviser at Taiwan’s National Security Council, warned that China appears…
Ivanti EPMM Zero-Day Bugs Spark Exploit Frenzy — Again Summary Ivanti disclosed two critical pre-auth remote code execution vulnerabilities in Endpoint Manager Mobile (EPMM) — CVE-2026-1281 and CVE-2026-1340 — each…
SpecterOps Launches BloodHound Scentry to Accelerate the Practice of Identity Attack Path Management Summary SpecterOps has introduced BloodHound Scentry, a managed service that pairs BloodHound Enterprise with SpecterOps’ red‑team tradecraft…
Dutch mobile phone giant Odido announces data breach Summary Odido, the Netherlands’ largest mobile provider, disclosed a cyberattack that resulted in the theft of personal data for roughly 6.2 million…
