advisoryvia UK NCSC
Incident affecting ASOS customers
ASOS has said it is investigating a cyber incident and that some customer personal information may have been accessed.
Oct 6, 2026 UTC
Security news
Stories are attributed to their original publishers and reviewed by an editor before they appear here. Always read the original source.
advisoryvia CERT/CC Vulnerability Notes
VU#553437: InsydeH2O IHISI SMM is vulnerable to unsafe memory write operations
Overview An Out-of-bounds Write vulnerability in the InsydeH2O IHISI software used by HP PC BIOS can allow a local attacker with OS kernel privileges to perform arbitrary physical...
Oct 1, 2026 UTC
advisoryvia CERT/CC Vulnerability Notes
VU#762428: Authlib library contains a signature‑verification bypass vulnerability
Overview Authlib (versions up to and including 1.7.2) contain a signature‑verification bypass in the JSON Web Signature (JWS) general JSON serialization handling. The JsonWebSigna...
Sep 28, 2026 UTC
ransomwarevia Krebs on Security
Dutch Police Arrest ‘Reformed’ Hacker in Shiny Hunters Investigation
Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. I...
Sep 28, 2026 UTC
advisoryvia UK NCSC
Exploitation of vulnerabilities affecting Citrix NetScaler ADC and Citrix NetScaler Gateway
The NCSC is urging UK organisations to promptly mitigate vulnerabilities affecting Citrix NetScaler ADC and Gateway, two of which are being actively exploited.
Sep 28, 2026 UTC
ransomwarevia Krebs on Security
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata for more than 100 million AT&T customers in...
Sep 25, 2026 UTC
advisoryvia CERT/CC Vulnerability Notes
VU#699627: Readwise Reader for Android, version 8.7.2, contains multiple XSS vulnerabilities
Overview Three cross-site scripting (XSS) vulnerabilities identified in Readwise Reader for Android version 8.7.2 are disclosed. An attacker with the ability to craft malicious do...
Sep 25, 2026 UTC
advisoryvia UK NCSC
One does not simply defend agentically
Defenders can’t use AI in the same way attackers can, but there’s much they can do to unlock the potential of agentic cyber defence.
Sep 21, 2026 UTC
advisoryvia UK NCSC
Cyber Adversary Simulation (CyAS): scheme documents now available
Our view of good cyber adversary simulation – and how assured providers can deliver it.
Sep 17, 2026 UTC
advisoryvia UK NCSC
Adversary simulation: what you need to know
Adversary simulation ('red teaming') tests your ability to prevent, detect and respond to cyber attacks.
Sep 17, 2026 UTC
vulnerabilityvia Krebs on Security
Data Broker Radaris Loses Domains in Privacy Fight
The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That repu...
Sep 16, 2026 UTC
advisoryvia UK NCSC
Iranian cyber targeting of dissidents, activists and journalists
Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.
Sep 15, 2026 UTC