Synology Issues a Rare Ransomware Warning: Outdated NAS Boxes Are Being Encrypted by C3RB3R 
Northflank Tells Every Customer to Rotate Secrets After a Breach, and Stolen AI Keys Are Already Being Used 
Attackers Are Trying to Catch WordPress Sites Mid-Update: The Race-Condition Flaw Fixed in 7.1.4, and a Checklist for Site Owners 
Run an Online Store on Drupal? Attackers Are Already Using a Commerce Core Flaw That Needs No Login. Five Steps for Today 
Attackers Are Crashing Cisco Firewalls Through Their VPN Login Page: The Three Conditions, the Fixed Versions and the Stopgap 
Root Access Through a Server Update Tool: Dell’s DSU Fix on One Page, Plus a Rollout Checklist
The tools that keep servers updated usually run with the highest privileges on the machine, which makes a flaw in...
Flooded by Automated Bug Reports, Google Puts Its Open-Source Bounty on Hold
Bug bounty programs run on a simple bargain: outside researchers find real security holes, and the software maker pays for...
One Company’s Access, 8.8 Million Records: Denmark’s Population Register Breach in Q&A
Denmark has disclosed a breach of its national population register that touches roughly four in five of the people recorded...
Timeline: How a NetScaler SAML Zero-Day Went From Mystery Reboots to an Emergency Patch
Over one weekend, a handful of puzzling crash reports from NetScaler administrators turned into a confirmed zero-day, an emergency software...
Microsoft Turns On Windows Settings Backup by Default for Entra-Joined PCs
Here Is How Layered Recovery Defenses HelpMicrosoft says Windows settings backup is now on by default for eligible Microsoft Entra-joined...
Danish University IAM Breach: A Checklist After Up to 200,000 Records Exposed
The Technical University of Denmark (DTU) disclosed that attackers reached DTUBasen, its identity and access management system, with compromised credentials...
Kiteworks Email Gateway Flaws Explained: A Six-Step Walkthrough
Secure content platforms sit at the edge of email and file exchange, which makes maximum-severity bugs hard to ignore. Kiteworks...
GitLab AI Gateway Critical Flaw: Your Questions Answered
GitLab is telling customers who run their own AI Gateway for Duo features to patch immediately. If your developers use...
A Timeline of the ShinyHunters Crackdown After a Key Arrest Report
Extortion crews that steal SaaS and cloud data rarely vanish overnight, but arrests can scramble their operations. Here is a...
Cisco SD-WAN Manager Zero-Day Lets Attackers Skip Login: A Plain-English Briefing
What happenedCisco has released fixes for a critical authentication bypass in Catalyst SD-WAN Manager (formerly SD-WAN vManage), tracked as CVE-2026-76504....
