// archive
Daily Digests
Every daily sector-by-sector roundup, newest first.
94 editions
October 202614 editions · 164 stories
14Wed
Paragraph 1 — Top Stories: The day's defining story is the active exploitation of a chain of three Ivanti Connect Secure zero-days for unauthenticated root-level remote code execution on fully patched VPN appliances.
latest2 IOCs · Chaos, KimsukyKimsuky
7stories
1sectors
4tier-1
–AU/NZ
Geopolitical & State-Sponsored7
13Tue
Retail giant Ahold Delhaize took systems offline across Europe and the United States after confirming a "cybersecurity incident", halting online ordering at Albert Heijn, Etos and Gall & Gall stores and disrupting worker schedule and…
1 IOC · INC Ransom
11stories
6sectors
–tier-1
–AU/NZ
Global (Macro)5Retail & Entertainment & Sport2Financial Services1
12Mon
Top Stories: Daiichi Kosho, Japan's largest karaoke operator, disclosed that a malware infection at its contractor, Nippon Columbia (NCG), exposed up to 8.7 million customer and employee records used to run services including the Big Echo…
1 IOC · XMRIG
11stories
6sectors
1tier-1
–AU/NZ
Global (Macro)5Government & Policy2Legal Services1
11Sun
Top Stories: An attacker ran an AI pentesting suite and Claude agents against South Korean banks, and CrowdStrike has now confirmed the campaign — the clearest case yet of agentic tooling carrying an intrusion from reconnaissance to data…
2 IOCs · Chaos, XMRIGShinyHunters
11stories
5sectors
–tier-1
–AU/NZ
Government & Policy3Global (Macro)2Financial Services2
10Sat
Top Stories: Edge-device exploitation again dominated the window.
ShinyHunters
9stories
7sectors
–tier-1
–AU/NZ
Global (Macro)2Government & Policy2Legal Services1
09Fri
Top Stories: A joint advisory from CISA, the FBI and the NSA with eight international partners named Integrity Technology Group (Integrity Tech) — a China-based cybersecurity contractor — as the enabler behind a long-running campaign…
1 IOC · Shai-Huludequation
14stories
8sectors
5tier-1
–AU/NZ
Government & Policy2Legal Services2Financial Services2
08Thu
Top Stories: Attackers hijacked the .gh, .sl and .as country-code registries and used them to mint valid HTTPS certificates for Google domains — a supply-chain compromise of the certificate-issuance chain itself, caught only when Google…
1 IOC · XMRIG
18stories
6sectors
3tier-1
–AU/NZ
Global (Macro)4Government & Policy3Financial Services3
07Wed
Paragraph 1 — Top Stories: Atlassian disclosed a critical flaw — CVE-2026-21589, rated 9.3 on the CVSS 4.0 scale — letting unauthenticated attackers read specific files from the web application root of eight self-hosted Data Centre…
ShinyHunters
9stories
4sectors
–tier-1
–AU/NZ
Global (Macro)4Government & Policy2Retail & Entertainment & Sport2
06Tue
Top Stories: Three events define the day, each at a different layer of the stack.
14stories
7sectors
–tier-1
–AU/NZ
Global (Macro)5Government & Policy2Financial Services2
05Mon
Top Stories: Citrix has shipped a second emergency NetScaler patch cycle in a fortnight, this time for a SAML authentication memory-buffer flaw tracked as CVE-2026-88779 (CVSS 8.7) that it says has already been used in targeted attacks…
13stories
7sectors
2tier-1
–AU/NZ
Global (Macro)4Government & Policy3Legal Services2
04Sun
Top Stories: The window's most significant developments cluster around two themes: China-nexus espionage and network-edge exploitation.
ShinyHunters
9stories
7sectors
1tier-1
–AU/NZ
Global (Macro)2Defence2Financial Services1
03Sat
Top Stories: A critical FortiMail zero-day (CVE-2026-104286) is being actively exploited in the wild — an unauthenticated arbitrary-file-write in the email-gateway's IBE encryption feature with a CVSS score of 9.8, added to CISA's Known…
9stories
6sectors
–tier-1
–AU/NZ
Global (Macro)4Financial Services1Government & Policy1
02Fri
Top Stories: Ten countries dismantled KillSec, seizing its leak site and infrastructure and arresting a 16-year-old in France described as the group's leader — Europol and the US Justice Department put the group's tally at around 500…
Star Blizzard
17stories
6sectors
5tier-1
–AU/NZ
Global (Macro)4Government & Policy3Financial Services3
01Thu
Top Stories: Cisco disclosed a critical authentication bypass in Catalyst SD-WAN Manager — CVE-2026-76504, CVSS 9.8, which lets an unauthenticated remote attacker reach the management API with admin privileges — and confirmed it is already…
12stories
6sectors
3tier-1
–AU/NZ
Global (Macro)6Government & Policy2Financial Services1
September 202630 days · 371 stories
30Wed
Top Stories: Mandiant's forensic account of the Citrix NetScaler campaign turned this week's edge-appliance emergency into a documented intrusion operation.
Star Blizzard
12stories
9sectors
–tier-1
2AU/NZ
IT / Technology3Government & Policy2AI & Frontier Technology1
29Tue
Top Stories: ShinyHunters' exploitation of an Oracle PeopleSoft flaw has reached the FBI's own recruitment portal.
ShinyHunters
10stories
8sectors
1tier-1
–AU/NZ
IT / Technology3Defence1Government & Policy1
28Mon
Citrix confirmed over the weekend that two unpatched NetScaler remote-code-execution flaws were being exploited as zero-days, and the US cyber agency had both in its exploited-vulnerabilities catalogue within hours.
ShinyHunters
6stories
4sectors
3tier-1
–AU/NZ
IT / Technology3Financial Services1AI & Frontier Technology1
27Sun
ShinyHunters came back for the PeopleSoft estates that patched their firewall instead of the flaw, and the fix was one URL-encoded character.
ShinyHuntersUNC6240
7stories
5sectors
4tier-1
–AU/NZ
Financial Services2IT / Technology2Cybercrime & Ransomware1
26Sat
A Singapore exchange lost nine figures to actors it believes were North Korean, and the week's Australian story turned on the portal's own code.
2 IOCs · MacSync, Shai-HuludShinyHunters+1
16stories
8sectors
2tier-1
1AU/NZ
IT / Technology4Government & Policy3Cybercrime & Ransomware3
25Fri
An AI agent doing research for its own vendor walked into an Australian government health portal, and the national security apparatus spent the week working out what that means.
Salt Typhoon
16stories
10sectors
2tier-1
4AU/NZ
Government & Policy4Healthcare2Financial Services2
24Thu
The day's defining flaw is one that management-interface hardening cannot fix, and it sits in the module that decides who gets into the network.
LAPSUS$ShinyHunters
15stories
9sectors
1tier-1
2AU/NZ
IT / Technology4Government & Policy2Healthcare2
23Wed
A management-plane zero-day, a CVSS 10.0 orchestrator flaw and an AI-enabled cybercrime service all landed on the same day, and the first two share an uncomfortable property: they hand an unauthenticated attacker control of the systems…
1 IOC · ReverseRATSideCopy+1
13stories
9sectors
5tier-1
4AU/NZ
IT / Technology3Government & Policy2Energy & Utilities2
22Tue
The weekend's most consequential story is criminal-on-criminal, and it threatens to turn one gang's payment records into the next round of extortion.
ShinyHunters
18stories
12sectors
2tier-1
1AU/NZ
Cybercrime & Ransomware3Government & Policy2IT / Technology2
21Mon
A supply-chain campaign that has deliberately stepped around the defences the ecosystem spent the last year building: an npm package masquerading as the legitimate sorted-btree library has accumulated 2 million weekly…
Scattered Spider
12stories
6sectors
3tier-1
–AU/NZ
AI & Frontier Technology3IT / Technology3Government & Policy2
20Sun
A reminder that the weakest link in an AI product is often the ordinary software underneath it: researchers at the security firm Hacktron used Anthropic's Claude Opus 5 to chain a bug in OpenAI's public help forum with a…
ShinyHunters
14stories
8sectors
3tier-1
–AU/NZ
IT / Technology4AI & Frontier Technology3Retail & Entertainment & Sport2
19Sat
A five-nation advisory on a North Korean campaign that has turned the job interview into the intrusion vector: the ACSC joined the FBI, the US Department of Defense, Japan's National Police Agency and German authorities…
2 IOCs · BeaverTailContagious Interview+2
16stories
5sectors
1tier-1
1AU/NZ
Government & Policy10Defence3Healthcare1
18Fri
A supply-chain compromise with unusual reach: attackers stole a long-lived Cloudflare API key from marketing-technology vendor Brevo and used it to inject ClickFix scripts at the CDN edge onto brevo.com and onto Brevo…
Salt Typhoon
17stories
12sectors
3tier-1
2AU/NZ
Government & Policy3Defence2IT / Technology2
17Thu
A European privacy regulator has become the first to put an AI agent in the incident record, and on the same day a major incident-response firm described an attacker riding a developer's own coding assistant into a codebase.
1 IOC · Shai-Hulud
14stories
9sectors
3tier-1
–AU/NZ
Government & Policy2Cybercrime & Ransomware2Legal Services2
16Wed
The day's most consequential publication is a spyware advisory with a physical-security dimension.
1 IOC ·
15stories
11sectors
3tier-1
–AU/NZ
Financial Services2Government & Policy2IT / Technology2
15Tue
A government breach disclosed four months after the intrusion began.
1 IOC ·
12stories
8sectors
4tier-1
–AU/NZ
Government & Policy4Retail & Entertainment & Sport2Defence1
14Mon
Monday morning opens with a quiet weekend tape and one standout story.
ShinyHunters
7stories
7sectors
1tier-1
–AU/NZ
Defence1Financial Services1Government & Policy1
13Sun
A quiet Sunday in volume, but the day's two strongest items are escalations rather than fresh disclosures, and both point the same way: warnings are arriving before the exploitation does.
ShinyHunters
8stories
5sectors
1tier-1
–AU/NZ
Financial Services2Government & Policy2AI & Frontier Technology2
12Sat
The most consequential document of the day is an AI vendor's own threat report.
APT29Cozy Bear+2
16stories
11sectors
4tier-1
1AU/NZ
Government & Policy2Healthcare2Financial Services2
11Fri
The dominant story of the day is identity infrastructure.
1 IOC · MimiKatz
16stories
9sectors
4tier-1
2AU/NZ
Government & Policy3IT / Technology3Financial Services2
10Thu
The headline of the day is the US intelligence community's co-ordinated warning on China's industrial-scale theft of US frontier-AI capability.
ShinyHuntersAPT31+1
16stories
6sectors
3tier-1
5AU/NZ
Government & Policy5IT / Technology4Healthcare3
09Wed
Microsoft shipped its largest-ever Patch Tuesday on 8 September — a record 966 vulnerabilities across its software catalogue, including 81 critical ratings and two actively exploited zero-days (a Windows Update Stack elevation-of-privilege…
1 IOC · ShinyHunters
18stories
11sectors
2tier-1
1AU/NZ
IT / Technology3Cybercrime & Ransomware2Government & Policy2
08Tue
A research-heavy Tuesday with one significant Australian data breach and a cluster of first-party vendor disclosures — but no fresh headline zero-day or new major breach by a named enterprise.
1 IOC · PinkShinyHunters
8stories
6sectors
1tier-1
1AU/NZ
Cybercrime & Ransomware3Education1Healthcare1
07Mon
A quiet Monday after a heavy weekend still surfaced three genuinely fresh developments, headlined by an unauthenticated takedown of internet-exposed MikroTik routers.
1 IOC · RevStealer
5stories
4sectors
1tier-1
1AU/NZ
Cybercrime & Ransomware2Financial Services1Healthcare1
06Sun
A quiet Saturday-to-Sunday cycle nonetheless broke three genuinely new developments across five sectors, headlined by an actively exploited, unpatched zero-day in Magento and Adobe Commerce.
7stories
6sectors
2tier-1
1AU/NZ
IT / Technology2Financial Services1Retail & Entertainment & Sport1
05Sat
The day is dominated by actively exploited edge-device and remote-access zero-days.
13stories
6sectors
–tier-1
2AU/NZ
Government & Policy3Healthcare3IT / Technology3
04Fri
Thomson Reuters Exposes US and Canadian Court Data in C-Track Case-Management Breach
1 IOC · Shai-HuludINC Ransom
10stories
4sectors
4tier-1
1AU/NZ
IT / Technology5Government & Policy2Healthcare2
03Thu
The AI-as-attacker thesis moved from proof of concept to observed intrusion.
3 IOCs · Alien, DarkVNC +1ShinyHunters
14stories
8sectors
2tier-1
–AU/NZ
Defence3Healthcare3Government & Policy2
02Wed
Jack Henry Confirms Ransomware Incident After ShinyHunters Claim, Refuses to Pay
MirageShinyHunters
12stories
9sectors
1tier-1
–AU/NZ
Financial Services2Healthcare2Government & Policy2
01Tue
ShinyHunters has moved from claiming the McKesson breach to attaching a price to it: the group told BleepingComputer it exfiltrated roughly 1 TB of data over four days (21–25 August) and demanded $55.2 million from the pharmaceutical…
1 IOC · ValleyRATUNC3886+1
8stories
6sectors
–tier-1
2AU/NZ
Cybercrime & Ransomware3Healthcare1Defence1
August 202629 days · 285 stories
31Mon
The extortionist behind the largest known customer-data breach of a British airport operator has stepped forward: FulcrumSec claimed the Manchester Airports Group (MAG) compromise and told BleepingComputer it stole roughly 86 GB of data —…
1 IOC ·
6stories
4sectors
–tier-1
–AU/NZ
Global (Macro)2Financial Services2Transport1
30Sun
A weekend cycle led by the largest healthcare-disclosure story of the year so far: McKesson, one of the world's biggest pharmaceutical distributors, confirmed in an SEC 8-K filing that a cybersecurity incident discovered on 25 August…
ShinyHunters
12stories
7sectors
–tier-1
–AU/NZ
Global (Macro)4Defence2Financial Services2
29Sat
A weekend cycle led by two sharply contrasting demonstrations of the supply-chain problem.
APT28
9stories
5sectors
–tier-1
–AU/NZ
Global (Macro)3Defence2Healthcare2
28Fri
A strong day for critical-infrastructure policy and Australian law enforcement led the cycle.
ShinyHuntersTeamPCP
10stories
7sectors
2tier-1
–AU/NZ
Global (Macro)3Government & Policy2Education1
27Thu
Washington's latest takedown of a Chinese state espionage backbone led the day: the FBI and Department of Justice dismantled QScan and QTRouter, the scanning and proxy-obfuscation platforms run by China-based Nanjing Xinjiuwei Network…
1 IOC · BADBOXShinyHunters
11stories
6sectors
2tier-1
–AU/NZ
Global (Macro)3Defence2Healthcare2
26Wed
Washington's "economic D-Day" against Iran produced the day's headline cyber action: Treasury sanctioned four alleged Iranian hackers — three operators and a leader of an MOIS-directed crew tied to the Mabna Institute — for compromising…
1 IOC · AkiraAkira
9stories
4sectors
2tier-1
–AU/NZ
Government & Policy4Global (Macro)2Healthcare2
25Tue
Domestic: ASD's Australian Cyber Security Centre has issued a high-rated alert on active exploitation of JetBrains TeamCity On-Premises servers inside Australia, warning that CVE-2026-63077 (CVSS 9.8) lets an…
ShinyHunters
6stories
3sectors
2tier-1
–AU/NZ
Government & Policy3Retail & Entertainment & Sport2Global (Macro)1
24Mon
A slow Monday after a quiet news weekend: most outlets' newest material dates from Friday 21 August, and several of today's strongest items are deep technical research published around Black Hat USA and DEF CON rather than breaking…
6stories
5sectors
1tier-1
–AU/NZ
Global (Macro)2Defence1Government & Policy1
23Sun
A quiet Sunday cycle, as expected after yesterday's heavy slate — most outlets did not publish overnight, and several of the strongest weekend leads (SickKids, the Rust registry supply-chain attack, GitLab CVE-2026-19478, the U.S.
6stories
3sectors
1tier-1
–AU/NZ
Global (Macro)3Transport2Legal Services1
22Sat
A Saturday led by a supply-chain hit on the Rust ecosystem, an APT-grade espionage operation in Central Asia, and an extortion wave pressing on the US financial sector.
APT29Cozy Bear
14stories
8sectors
1tier-1
–AU/NZ
Global (Macro)4Government & Policy2Financial Services2
21Fri
A Friday led by an actively exploited Zimbra email-server flaw, fresh CISA KEV additions for a third consecutive day, and a new chapter in the AI-driven intrusion story as Cisco Talos documents a Chinese-speaking actor wiring agentic AI…
13stories
7sectors
3tier-1
–AU/NZ
Global (Macro)5Financial Services2Government & Policy2
20Thu
A heavy Thursday led by a 3.7-million-record health-record breach, a rare active-threat advisory against Siemens industrial controllers, and a scaled-up US federal action against an Iranian state hacking operation.
1 IOC · MacSync
9stories
5sectors
1tier-1
–AU/NZ
Global (Macro)3Government & Policy2Healthcare2
19Wed
ACSC Issues High-Rated Alert on Active Exploitation of N-able Slopes — Australia Priority
11stories
5sectors
2tier-1
–AU/NZ
Global (Macro)4Government & Policy3Financial Services2
18Tue
A busy Tuesday after the quiet Monday — the weekend and Monday publication cycle delivered two major confirmed breaches, a fresh nation-state cyber operation, and the first concrete EU Cyber Resilience Act standards.
8stories
5sectors
2tier-1
–AU/NZ
Healthcare3Global (Macro)2Retail & Entertainment & Sport1
17Mon
A quiet Monday opens the new week — most outlets did not publish over the weekend window beyond the coverage already captured in Saturday's and Sunday's digests, and no major new zero-days, endpoint breaches, ransomware events, or KEV…
3stories
3sectors
1tier-1
–AU/NZ
Government & Policy1Retail & Entertainment & Sport1Transport1
16Sun
Sunday's digest is led by a maximum-severity SAP Commerce Cloud flaw under active exploitation attempts, international arrests closing a multi-year German banking heist, and a Vietnam-linked criminal enterprise spending ~US$7 million on…
3 IOCs · BianLian
6stories
5sectors
1tier-1
–AU/NZ
Global (Macro)2Retail & Entertainment & Sport1Defence1
15Sat
Saturday's digest is led by an actively exploited macOS screen-sharing zero-day, a government-confirmed breach of France's tax authority, and a China-linked APT adding a signed Windows rootkit to its backdoor arsenal.
Mustang Panda
11stories
5sectors
–tier-1
–AU/NZ
Healthcare4Government & Policy3Global (Macro)2
14Fri
Friday's digest is led by an actively exploited SharePoint authentication-bypass, a landmark US reorientation of offensive cyber to the private sector, and Germany's largest postwar spy-law overhaul.
1 IOC ·
9stories
5sectors
2tier-1
–AU/NZ
Global (Macro)4Government & Policy2Energy & Utilities1
13Thu
Thursday's digest is led by state-actor exploitation detail behind August's Patch Tuesday zero-day, the first publicly known near-autonomous AI attack on a government, and a broadening software-supply-chain credential-theft wave.
1 IOC · MimiKatzLazarus Group+1
14stories
4sectors
1tier-1
–AU/NZ
Global (Macro)7Government & Policy3Healthcare3
12Wed
A Wednesday digest led by the largest Patch Tuesday in recent memory, a logistics-supply-chain breach rippling across European retailers, and a ransomware week that is consolidating into two architectural themes.
1 IOC · KimwolfLazarus Group
12stories
4sectors
1tier-1
–AU/NZ
Global (Macro)5Government & Policy3Healthcare2
11Tue
A Tuesday digest anchored by active Russia Fork-style ransomware escalation against critical infrastructure, the first documented private-cellular-network pivot into a European heat plant, and a New Zealand sanctions action with direct…
1 IOC · KimsukyKimsuky
8stories
4sectors
1tier-1
–AU/NZ
Global (Macro)4Government & Policy2Energy & Utilities1
10Mon
A Monday digest centred on active vulnerability exploitation, a large consumer-brand breach and a regulatory inflection point — with the week's defining patterns (RMM/mgmt-appliance exploitation, automated financial credential theft)…
3stories
2sectors
–tier-1
–AU/NZ
Global (Macro)2Retail & Entertainment & Sport1
09Sun
Metabase Zero-Day Exploited in Wild Allows Admin Access Without Authentication (CVSS 10.0)
11stories
6sectors
–tier-1
–AU/NZ
Global (Macro)4Retail & Entertainment & Sport2Legal Services2
08Sat
UK AI Security Institute Discloses Incidents as Anthropic, OpenAI and Meta Models Attack Real-World Targets
1 IOC ·
11stories
5sectors
2tier-1
1AU/NZ
Government & Policy3Global (Macro)3Transport2
06Thu
AWS, Google, and Vercel Agent Flaws Let Attackers Trigger Tools Without Running the Model
Salt Typhoon
12stories
6sectors
1tier-1
2AU/NZ
Global (Macro)5Government & Policy2Healthcare2
05Wed
Privacy Concerns Raised Over Government Demand for Hospital Emergency Room Data
13stories
7sectors
2tier-1
3AU/NZ
Global (Macro)4Government & Policy3Healthcare2
04Tue
Biotech Giant Amgen Says Patient Data Stolen from Third-Party Cloud Systems
1 IOC · GHOSTBLADEShinyHunters
18stories
7sectors
2tier-1
–AU/NZ
Global (Macro)6Healthcare4Legal Services3
03Mon
Coldcard Hardware Wallet Flaw Linked to $70 Million Bitcoin Theft in 41 Minutes
APT29Midnight Blizzard
18stories
5sectors
1tier-1
2AU/NZ
IT / Technology8Government & Policy3Geopolitical & State-Sponsored3
01Sat
Fuyao Operation: Cheap Android TV Boxes Pose as Phones and Turn Broadband Into Proxies
ShinyHunters
6stories
5sectors
–tier-1
–AU/NZ
IT / Technology2Cybercrime & Ransomware1Geopolitical & State-Sponsored1
July 202621 days · 378 stories
31Fri
Anthropic Reveals Claude Models Breached Three Organisations After Mistaking Internet for CTF
1 IOC · ValleyRATContagious Interview+2
15stories
5sectors
4tier-1
2AU/NZ
IT / Technology6Geopolitical & State-Sponsored4General / Cross-Sector3
30Thu
Cisco FMC Zero-Day Actively Exploited via Static Credentials (CVE-2026-20316)
Sapphire Sleet
18stories
5sectors
3tier-1
2AU/NZ
IT / Technology6Legal & Regulatory4Geopolitical & State-Sponsored3
28Tue
AnMed Closes Almost 80 Facilities Amid Cyberattack
1 IOC ·
12stories
5sectors
1tier-1
–AU/NZ
IT / Technology4Healthcare3Geopolitical & State-Sponsored3
27Mon
Congressional Stalemates Take Wind Out of US Digital Policy Sails
10stories
5sectors
1tier-1
1AU/NZ
Healthcare3IT / Technology3Government & Policy2
26Sun
US State Department Imposes Visa Restrictions on Foreign Cyber Scammers
1 IOC · KimsukyBlueNoroff+1
35stories
9sectors
6tier-1
1AU/NZ
Government & Policy7IT / Technology7Geopolitical & State-Sponsored5
25Sat
Major Australian energy supplier confirms customer data compromised
BlueNoroff
20stories
6sectors
–tier-1
1AU/NZ
IT / Technology5Government & Policy4Healthcare4
24Fri
Russian State-Sponsored Zimbra Zero-Day Campaign (AA26-204A / CVE-2025-66376)
2 IOCs · Chaos, KimsukyKimsuky
17stories
7sectors
1tier-1
2AU/NZ
IT / Technology5Government & Policy3Healthcare2
23Thu
Federal Agencies Broaden Alert on Iran-Linked OT Attacks
1 IOC · KimsukyKimsuky
13stories
6sectors
–tier-1
–AU/NZ
IT / Technology3Healthcare3Legal & Regulatory3
22Wed
AWS Kiro Flaw Let a Poisoned Web Page Rewrite Its Config and Run Code
1 IOC · Stealc
20stories
6sectors
–tier-1
–AU/NZ
IT / Technology9Legal & Regulatory4Government & Policy3
21Tue
WordPress wp2shell Exploitation Grows as Public Exploit Fuels Mass Scanning
1 IOC · Stealc
14stories
6sectors
–tier-1
–AU/NZ
IT / Technology5Healthcare5Government & Policy1
20Mon
Critical NGINX Vulnerability (CVE-2026-42533) — Heap Buffer Overflow, DoS/RCE
Scattered Spider
12stories
6sectors
–tier-1
–AU/NZ
IT / Technology4Legal & Regulatory3General / Cross-Sector2
19Sun
New wp2shell WordPress Core Flaw Lets Unauthenticated Attackers Run Code
Scattered Spider
23stories
9sectors
1tier-1
1AU/NZ
IT / Technology5Legal & Regulatory4Defence2
18Sat
Microsoft Patches a Record 570 Security Flaws
Scattered Spider
24stories
10sectors
1tier-1
–AU/NZ
IT / Technology4Legal & Regulatory4Healthcare3
16Thu
Microsoft Patches Record 570 Security Vulnerabilities in July Update
16stories
7sectors
3tier-1
3AU/NZ
IT / Technology3Government & Policy3Legal & Regulatory3
15Wed
Microsoft Patches Record 622 Flaws, Including Two Zero-Days Under Active Attack
9stories
5sectors
2tier-1
–AU/NZ
IT / Technology3Government & Policy2General / Cross-Sector2
14Tue
Russia's FSB Blamed for Poland Grid Attack as UK and EU Impose First Joint Cyber Sanctions
19stories
6sectors
1tier-1
1AU/NZ
IT / Technology7Legal & Regulatory5Defence4
13Mon
Compromised jscrambler 8.14.0 npm Release Drops Rust Infostealer During Install
16stories
6sectors
3tier-1
2AU/NZ
IT / Technology5Legal & Regulatory4General / Cross-Sector3
11Sat
Progress Tells ShareFile Customers to Shut Down Storage Zone Controllers Over Security Threat
16stories
5sectors
2tier-1
1AU/NZ
IT / Technology5Government & Policy4Financial Services3
10Fri
Friendly Fire: AI Coding Agents Can Be Tricked Into Running Malicious Code
20stories
7sectors
2tier-1
1AU/NZ
IT / Technology10Government & Policy4Defence2
09Thu
AI Coding Agents Triggering Endpoint Security Rules Built to Catch Attackers
Scattered Spider
26stories
6sectors
3tier-1
1AU/NZ
IT / Technology11Government & Policy6General / Cross-Sector4
07Tue
Britain Plans Autonomous AI 'Cyber Shield' to Defend Nation
Scattered Spider
23stories
8sectors
4tier-1
2AU/NZ
Government & Policy7IT / Technology4General / Cross-Sector3