Security technology news

Search Search

Category

• All
• Threats, ransomware & breaches
• Vulnerabilities & exploits
• Operating systems & software
• Network & security devices
• Cloud & SaaS
• Hardware & firmware
• Identity & access
• OT, ICS & IoT
• Applications & supply chain
• AI security
• Policy, regulation & law enforcement
• Industry & products

Region

• All regions
• Global
• United Kingdom

• Threats, ransomware & breaches Break the silence: Kazakhstan-nexus UAT-6275 targets CIS government organizationsTalos and Recorded Future identified UAT-6275 activity targeting government organizations across the Commonwealth of Independent States. Recovered artifacts show additional interest in water resources and energy. Cisco Talos · Global · 14 Oct 2026
• Policy, regulation & law enforcement The hidden network: Inside the phishing infrastructure ecosystem powering global cybercrimeMicrosoft uncovered a Chinese-language cybercriminal ecosystem, an interconnected network of phishing kit operators (tracked as Storm-2990), and an illicit marketplace (tracked as Storm-3119) selling tools and infrastructure for large-scale phishing. In collaboration with law enforcement agencies… Microsoft Security Blog · Global · 14 Oct 2026
• Vulnerabilities & exploits Microsoft Patches More Than 1,400 Security FlawsMicrosoft today issued updates to fix more than 1,400 security vulnerabilities in its Windows operating systems and other software. Today's epic patch batch dwarfs September's record of nearly 1,000 fixes, which was already about ten times the normal monthly patch load from Redmond. Krebs on Security · Global · 13 Oct 2026
• Threats, ransomware & breaches The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party RiskUnit 42 dissects a cyberattack targeting a European bank's IT infrastructure, delivering concrete defense strategies to help organizations detect and counter comparable threats. The post The Noise Inside the Network: How an Unsophisticated Attack Exposed a Third-Party Risk appeared first on Unit 42. Unit 42 · Global · 13 Oct 2026
• Vulnerabilities & exploits Microsoft Patch Tuesday for October 2026 — Snort rules and prominent vulnerabilitiesMicrosoft has released its monthly security update for October 2026, which includes 1415 vulnerabilities affecting a range of products, including 85 that Microsoft marked as "critical." Cisco Talos · Global · 13 Oct 2026
• Threats, ransomware & breaches Help the NCSC understand how organisations approach external attack surface riskWe're looking to hear from people involved in evaluating, selecting or adopting EASM. UK NCSC · United Kingdom · 12 Oct 2026
• Policy, regulation & law enforcement FBI Arrests Executive at Ransomware Negotiation FirmAgents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell… Krebs on Security · Global · 10 Oct 2026
• Vulnerabilities & exploits Making sure the checks get printedPierre's debut newsletter explores the messy, real-world side of risk management and how to keep vital systems running when a perfect patch isn't an option. Cisco Talos · Global · 8 Oct 2026
• Policy, regulation & law enforcement China-linked malicious actors called out by UK and international partners for targeting sensitive data globallyJoint advisory with international partners highlights malicious targeting of organisations from a range of sectors across the globe. UK NCSC · United Kingdom · 8 Oct 2026
• Cloud & SaaS Evolution of Web3 in Cloud Supply Chain AttacksUnit 42 details how threat actors leverage Web3 infrastructure and open-source supply chain attacks to breach enterprise cloud environments The post Evolution of Web3 in Cloud Supply Chain Attacks appeared first on Unit 42. Unit 42 · Global · 7 Oct 2026
• Policy, regulation & law enforcement ShinyHunters Extorted Boeing Spin-off Prior to ArrestsA teenager from Amman, Jordan suspected of leading the prolific data theft and extortion group ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other members of the hacking gang. KrebsOnSecurity has learned that the suspect, who uses the hacker handle "Rey,"… Krebs on Security · Global · 7 Oct 2026
• Policy, regulation & law enforcement Incident affecting ASOS customersASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed. UK NCSC · United Kingdom · 6 Oct 2026
• Applications & supply chain Blinder Tunnel Campaign Targets Iraqi InfrastructureAnalysis of Blinder Tunnel, an Iran-nexus campaign using fake Dubai Airports recruitment lures and GitHub C2 malware to target critical infrastructure. The post Blinder Tunnel Campaign Targets Iraqi Infrastructure appeared first on Unit 42. Unit 42 · Global · 6 Oct 2026
• Vulnerabilities & exploits How to fix a bug in a fixProject Zero often works with software vendors to remediate the vulnerabilities we report and provide broader guidance on making software more secure. Some vendors express concern about potential scenarios in which they are unable to fix vulnerabilities that are causing immediate user harm, due to… Google Project Zero · Global · 6 Oct 2026
• Network & security devices Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30)Unit 42 is aware of possible 0-day activity against NetScaler devices. Citrix reports CVE-2026-88771, CVE-2026-88772 have been exploited in the wild. The post Threat Brief: NetScaler Zero Days CVE-2026-88771 and CVE-2026-88772 Exploited in the Wild (Updated September 30) appeared first on Unit 42. Unit 42 · Global · 30 Sep 2026
• Cloud & SaaS OperTraitors: How Kubernetes Operators Betray Your Security PostureWe introduce OperTraitor, a tool to audit privileges of Kubernetes operators, identify excessive RBAC risks, and secure non-human identities. The post OperTraitors: How Kubernetes Operators Betray Your Security Posture appeared first on Unit 42. Unit 42 · Global · 29 Sep 2026
• Policy, regulation & law enforcement Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters InvestigationAuthorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect's arrest, remaining ShinyHunters members dramatically escalated their… Krebs on Security · Global · 28 Sep 2026
• Network & security devices Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler GatewayThe NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited. UK NCSC · United Kingdom · 28 Sep 2026
• Threats, ransomware & breaches 3 Consulting Myths Debunked by Unit 42 ExpertsUnit 42 security experts address critical cybersecurity misconceptions, offering practical insights to help your organization reinforce its enterprise defenses. The post 3 Consulting Myths Debunked by Unit 42 Experts appeared first on Unit 42. Unit 42 · Global · 25 Sep 2026
• Threats, ransomware & breaches U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon ExtortionsA U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in 2024 was sentenced to 70 months in federal prison today and ordered to pay nearly $300,000 in restitution to victims. Krebs on Security · Global · 25 Sep 2026

Headlines and short excerpts are collected automatically from public sources and link to the original publisher. NAPSECURE does not verify third-party content. Categories are assigned automatically and may occasionally be wrong.