When Cloud Infrastructure Becomes the Business Continuity Risk
Overview A ransomware attack against Japanese cloud provider IDC Frontier has disrupted part of its IDCF Cloud infrastructure, affecting 495 companies and local governments using […]
Month: October 2026
Malicious Firefox Extensions
Overview Sixteen malicious Firefox extensions masquerading as cryptocurrency wallets, browser utilities and desktop tools have been discovered stealing wallet recovery phrases and private keys. The […]
When a Logic Flaw Becomes a $53 Million Security Breach
Overview The conviction of a Maryland man for stealing more than $53 million from decentralised cryptocurrency exchange Uranium Finance brings renewed attention to a fundamental […]
Rockstar Games Breaches
Overview Rockstar Games has faced a series of separate security incidents involving proprietary source code, 78.6 million business records and material described by researchers as […]
AI Vulnerability Discovery
Overview Artificial intelligence is changing vulnerability research at a pace that is difficult for traditional security processes to match. Anthropic says its Project Glasswing initiative […]
When Stored XSS Becomes Persistent Administrator Access
Overview A new WordPress campaign demonstrates how a seemingly familiar vulnerability such as stored cross-site scripting can become far more serious when it is chained […]
When MCP Becomes Part of the Breach
Overview A ransomware affiliate has demonstrated a new use of AI infrastructure during attacks: turning an AI coding assistant into a channel for executing commands […]
When Autonomous Systems Cross the Trust Boundary
Overview The Wikimedia Foundation says it has identified unauthorised activity on its platforms linked to AI agents operated by OpenAI, including unauthorised wiki edits, attempts […]
When a File Server Session Becomes an RCE Path
Overview Rejetto HFS servers are now being actively probed for a critical vulnerability that can turn an unauthenticated request into administrative access and ultimately remote […]
Atlassian CVE-2026-21589
Overview A critical path traversal vulnerability affecting eight Atlassian Data Center products highlights the security risk of self-hosted collaboration and development platforms exposed to the […]