Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
U.S. Offers $10 Million for Zhang Yu, Hafnium’s Manager
The State Department places a record bounty on Zhang Yu, director of Shanghai Firetech and Chinese APT operator. Xu Zewei’s extraditio…
Arizona Courts Hacked: 1.3 Million People's Data Stolen in Phishing Attack
A phishing attack on the Arizona judicial system exposed foster care records and protective orders. No ransomware was deployed, raisin…
Southern Company Notifies 400,000 Customers of Portal Breach, Offers No Technical Details
Southern Company has notified roughly 400,000 customers of Georgia Power, Alabama Power, and Mississippi Power that an unauthorized th…
SonicWall SMA 1000 Critical SSRF Scores CVSS 10.0: Third Zero-Day in 2026
SonicWall patched CVE-2026-102255, a pre-authentication SSRF flaw in SMA 1000 appliances rated CVSS 10.0. It marks the third zero-day…
Termite Hits Aon: Cleo's 5.8.0.21 Patch Failed to Stop CVE-2024-50623
The Termite ransomware group breached Aon by exploiting CVE-2024-50623 in Cleo file-transfer software. The vendor's initial 5.8.0.21 p…
Android, October 2026: 25 Vulnerabilities Patched and a Return to a Single Patch Level
The October 2026 Android Security Bulletin fixes 25 vulnerabilities under a single patch level. A critical System component flaw allow…
X.Org Patches 12 CVEs: Nine Allow Arbitrary Code Execution
X.Org has released patches for 12 vulnerabilities in the X server and Xwayland, delivered in xorg-server 21.1.25 and xwayland 24.1.14.…
FBI Removes Accenture Contractor After Missed PeopleSoft Patch Exposes Sensitive Employee Data
On October 6, 2026, the FBI terminated an Accenture contractor responsible for managing its Oracle PeopleSoft HR platform after a June…
FBI Arrests 'Prometheus': First Top 10 Cyber Fugitive Linked to Tren de Aragua
Anibal Canelon Aguirre, alleged creator of the Ploutus ATM malware, appeared in a Nebraska court on Oct. 2, 2026. For the first time,…
FortiBleed: FBI Alert on 86,000+ Breached Fortinet Devices Enabling Ransomware
The FBI and U.S. Secret Service confirm FortiBleed is an active threat. Attackers cracked legacy SHA-256 hashes at scale, locking admi…
Pwn2Own Ireland 2026: 32 Zero-Days, $388,500 on Day One
Researchers exploited 32 zero-day vulnerabilities for $388,500 in prizes on the opening day of Pwn2Own Ireland 2026. The Samsung Galax…
BigDiskBuster Blocks Defender Updates: Antivirus Stays Active but Useless
Abdelhamid Naceri's BigDiskBuster proof-of-concept blocks Microsoft Defender updates by exhausting disk space, leaving the antivirus r…