Cybersecurity News
Stay informed about the latest cybersecurity incidents, vulnerabilities, and threat landscape changes. We cover data breaches, ransomware campaigns, critical CVEs, and regulatory updates – with context on what it means for you and how to protect yourself.
Anthropic warns about the risk of self-propagating AI worms targeting IoT devices
Anthropic has published a study describing a scenario for the emergence of self-propagating AI worms—small models capable of autonomously infecting ...
Key cybersecurity events of the first week of October 2026: arrests, vulnerabilities and new attack techniques
The first week of October 2026 was marked by several significant events: a third arrest in the ShinyHunters case, the ...
Critical vulnerability in SAP Cloud SDK for Python enables interception of OAuth2 credentials
SAP has disclosed a critical vulnerability CVE-2026-89111 with the maximum score of CVSS 10.0 in its Cloud SDK for Python, ...
Critical Cisco Catalyst SD-WAN Manager vulnerability is being actively exploited — CISA requires patching by October 3
On September 30, 2026, CISA added critical vulnerability CVE-2026-76504 in Cisco Catalyst SD-WAN Manager (vManage) to the Known Exploited Vulnerabilities ...
CVE-2026-86950: a public PoC appeared after Apple’s patch — what is known about the delivery vector via WhatsApp
On September 30, 2026, researchers from Calif published the first public proof-of-concept for the CVE-2026-86950 vulnerability — an out-of-bounds write ...
How Integrity Technology Group sold access to stolen Microsoft 365 and Exchange email
Since 2021, the China-linked company Integrity Technology Group, sanctioned by the US and the UK, has been systematically hacking the ...
Spike in personal data breaches in Japan due to attacks on APIs and Metabase
From July to September 2026, Japanese organizations faced a sharp increase in personal data breaches via web systems: according to ...
CVE-2026-56164: privilege escalation in Microsoft SharePoint without login
Microsoft has recorded exploitation of the privilege escalation vulnerability CVE-2026-56164 in Microsoft SharePoint Server, related to missing authentication for a ...
Claude incidents: why Anthropic shut off the internet for internal tests
Anthropic has temporarily disabled live internet access for all internal evaluations of its AI models after a series of incidents ...
CVE-2026-107406 in Citrix NetScaler: SAML configurations at risk of remote code execution
Citrix has released updates to address the critical CVE-2026-107406 vulnerability in NetScaler ADC and NetScaler Gateway. Under certain SAML settings ...
