The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
A nationwide facial recognition ID program is underway in France, in spite of a lawsuit and the data regulator's protests about lack of consent, data security …
A cybersecurity researcher recently published details and proof-of-concept for an unpatched zero-day vulnerability in phpMyAdmin'one of the most popular applic…
The massive data breach at Capital One ' America's seventh-largest bank, according to revenue ' has challenged many common assumptions about cloud computing fo…
Many people worry that quantum computers will be able to crack certain codes used to send secure messages. The codes in question encrypt data using trapdoor" m…
If you believe the US Federal Communications Commission, last Junes end of net neutrality-the system that required internet service providers to treat all data…
Northwestern University researchers have joined forces with BBN Technologies to demonstrate what they are calling the first truly quantum cryptographic data ne…
A type confusion flaw in PostgreSQL lets a database user who can create objects run code on the server. Updates released yesterday fix it, along with 51 other …
Vulnerable Check Point Security Gateway instances have been targeted in PHP2Shell attacks that deployed data-wiping malware on VMware ESXi hosts.…
November 12, 2026, was a big day for security fixes to PostgreSQL. Now that there is a new version of the software, some database indexes may need rebuilding a…
Two attacks made public this week allow a malicious host to read data inside AMD SEV-SNP-protected virtual machines (VMs), which are built to keep the server's…
Carly Page reports: Britain’s privacy watchdog has put healthcare bosses on notice after receiving more than 300 reports of staff snooping through medical reco…
libmongoc 1.30.15 Fixes Fix abort when parsing a cursor namespace without a dot separator. Fix possible abort in mongoc_gridfs_bucket_download_to_stream on inv…
tough-cookie could be made to modify application data if it received specially crafted cookies.
Despite longstanding concerns about the Kremlin’s access to the app’s data, NATO on Thursday issued guidance suggesting attendees of its flagship defense indus…
“Sharing account credentials with personal, third-party, AI assistants can expose sensitive information, and actions taken by these tools may result in uninten…
Romania's intelligence agency said it stopped a cyber-espionage campaign by Russian state-linked hackers before the group exfiltrated sensitive data.
PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code…
Connor Jones reports: A 2013 breach of Russian-language cybercrime forum YouHack exposed its members’ login details – and millions of credentials they had post…
AI provider keys that customers stored on Railway were stolen in an October breach and used to commit an estimated $740,000 in unauthorized spending, the platf…
HIPAA Journal has a convenient table of HIPAA enforcement actions by state attorneys general. Most entries involve violations of the Security Rule and/or HITEC…
Tess Ikonomou and Josh Butler report: OpenAI will not face criminal penalties over the Medicare data breach, but the prime minister has flagged changes to Aust…
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…
Starlet 0.33 fixes several security issues in the Starlet code: * prevent excessive CPU use when parsing malformed chunk-size lines * bound read allocations fo…