News & investigations · Archive

News & investigations

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Cookie theft: how fraudsters get the digital key to your accounts ↗ (opens in a new tab)

  Data and computer security | The Guardian · Published 2026-10-25 · First collected 2026-10-25

• CVE-2026-89090 - Denial of service in the event stream header decoder in AWS SDK for Go v2 ↗ (opens in a new tab)

  AWS Security Bulletins · Published 2026-10-25 · First collected 2026-10-25

• Tanskalais­yliopistot joutuivat kyber­hyökkäyksen kohteeksi ↗ (opens in a new tab)

  NCSC Finland Daily Security News · Published 2026-10-25 · First collected 2026-10-25

• Hackers Use Fake Chocolatey and Microsoft Activation Websites to Spread New Armorsteal Malware ↗ (opens in a new tab)

  GBHackers Security | #1 Globally Trusted Cyber Security News Platform · Published 2026-10-24 · First collected 2026-10-24

• Cyber insurance providers adapt to evolving threat landscape ↗ (opens in a new tab)

  SC Media · Published 2026-10-23 · First collected 2026-10-24

• Trust Is Not What It Seems — And Fraudsters Are Counting on It ↗ (opens in a new tab)

  darkreading · Published 2026-10-23 · First collected 2026-10-24

• There's a third PHP2Shell bug, but it won't get an emergency fix ↗ (opens in a new tab)

  www.theregister.com - Articles · Published 2026-10-23 · First collected 2026-10-24

• The cyber threat to aviation ↗ (opens in a new tab)

  Canadian Centre for Cyber Security news · Source updated 2026-10-23 · First collected 2026-10-24

• FCC bans two devices with surveillance chips linked to Huawei ↗ (opens in a new tab)

  The Record from Recorded Future News · Published 2026-10-23 · First collected 2026-10-24

• Microsoft: Windows Server 2016 reaches end of support in January ↗ (opens in a new tab)

  BleepingComputer · Published 2026-10-23 · First collected 2026-10-24

• Knicks sent employees fake offer of championship rings in phishing test: Report ↗ (opens in a new tab)

  Security - Ars Technica · Published 2026-10-23 · First collected 2026-10-24

• Senators say targeted ads are a security risk. Ad groups say the critics are off base. ↗ (opens in a new tab)

  CyberScoop · Published 2026-10-23 · First collected 2026-10-24

• State Bank of India Probes Exposure of Nearly 3,900 Customer Records ↗ (opens in a new tab)

  eSecurity Planet · Published 2026-10-23 · First collected 2026-10-24

• Dual BIOS: The laptop security feature SMBs don’t know they need ↗ (opens in a new tab)

  CSO Online · Published 2026-10-23 · First collected 2026-10-24

• Large businesses’ cybersecurity insurance claims are now less frequent but more expensive ↗ (opens in a new tab)

  Cybersecurity Dive - Latest News · Published 2026-10-23 · First collected 2026-10-24

• A spate of cyber attacks has rocked Japan ↗ (opens in a new tab)

  Latest from ITPro in Security · Published 2026-10-23 · First collected 2026-10-24

• Cyber Breach Hits Quest Diagnostics, Patient Records May Be Affected ↗ (opens in a new tab)

  Security Magazine · Published 2026-10-23 · First collected 2026-10-24

• Kwetsbaarheden in Oracle Fusion Middleware-producten: update nu ↗ (opens in a new tab)

  NCSC NL news · Published 2026-10-23 · First collected 2026-10-24

• Promoting security in the digital world during the European Cybersecurity Month (ECSM) ↗ (opens in a new tab)

  CERT.BE news · Published 2026-10-23 · First collected 2026-10-24

• Știrile săptămânii din cybersecurity (23.10.2026) ↗ (opens in a new tab)

  CERT.RO news · Published 2026-10-23 · First collected 2026-10-24

• CERT-SE:s veckobrev v.43 ↗ (opens in a new tab)

  CERT-SE news · Published 2026-10-23 · First collected 2026-10-24

• Gaming Giant Capcom Confirms Data Breach Exposed Users’ Personal Information ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-23 · First collected 2026-10-24

• Compromised TLS Certificates ↗ (opens in a new tab)

  Schneier on Security · Published 2026-10-23 · First collected 2026-10-24

• 11 Million Impacted by Capcom Data Breach ↗ (opens in a new tab)

  SecurityWeek · Published 2026-10-23 · First collected 2026-10-24

• Arista Networks: rilevato sfruttamento in rete della CVE-2026-114625 ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-23 · First collected 2026-10-24

• Australia sanctions North Korean IT worker bosses and financiers ↗ (opens in a new tab)

  iTnews · Published 2026-10-23 · First collected 2026-10-24

• Portal Texas Used to ‘Rubber Stamp’ Data Centers Down After 404 Media Reporting ↗ (opens in a new tab)

  404 Media · Published 2026-10-22 · First collected 2026-10-24

• Botched PHP2Shell disclosure revealed as panic continues ↗ (opens in a new tab)

  ComputerWeekly.com · Published 2026-10-22 · First collected 2026-10-24

• Indurex raises €7M to strengthen cybersecurity across critical infrastructure ↗ (opens in a new tab)

  Cybersecurity - Tech.eu · Published 2026-10-22 · First collected 2026-10-24

• Why CISOs Watch YouTube Videos To Find Cybersecurity Vendors ↗ (opens in a new tab)

  Cybercrime Magazine · Published 2026-10-22 · First collected 2026-10-24