Cyberattack on Poland’s power grid hit around 30 facilities, new report says Summary Cybersecurity firm Dragos reports that a coordinated cyberattack in late December compromised control and communications systems at…
Old Windows quirks help punch through new admin defences Summary Google Project Zero researcher James Forshaw disclosed nine vulnerabilities that could allow silent elevation to administrator on machines using Microsoft’s…
Microsoft Rushes Emergency Patch for Office Zero-Day Summary Microsoft has issued an emergency update for a zero‑day vulnerability in Microsoft Office and Microsoft 365 (CVE‑2026‑21509, CVSS 7.8) that is being…
‘Stanley’ Toolkit Turns Chrome Into Undetectable Phishing Vector Summary Researchers at Varonis have detailed a malware‑as‑a‑service kit called “Stanley” that produces malicious Chrome extensions capable of overlaying attacker‑controlled phishing pages…
Critical Telnet Server Flaw Exposes Forgotten Attack Surface Summary A critical authentication bypass in the GNU InetUtils telnetd server (CVE-2026-24061) allows attackers to bypass authentication by injecting an “-f root”…
Dozens more are charged in Ploutus ATM jackpotting conspiracy Summary The US Department of Justice has unveiled a federal grand jury indictment charging 31 people accused of using Ploutus malware…
Let them eat sourdough: ShinyHunters claims Panera Bread as stolen credentials victim Summary ShinyHunters claims it has stolen data from Panera Bread — reportedly more than 14 million records containing…
Office zero-day exploited in the wild forces Microsoft OOB patch Summary Microsoft has released an out-of-band (OOB) Office patch to address CVE-2026-21509, a zero-day security feature bypass vulnerability with a…
Daily briefing: Largest ever ‘superposition’ pushes quantum boundary Summary Physicists observed quantum interference in clusters of about 7,000 sodium atoms — roughly 8 nm across — with superpositions extending 133…
Russian state hackers likely behind wiper malware attack on Poland’s power grid Summary Researchers at cybersecurity firm ESET attribute a late‑December cyberattack on Poland’s energy sector to Sandworm, a Russia‑linked…
