News & investigations · Archive

News & investigations

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Threat actors use FortiCloud SSO bypass to collect LDAP connection passwords ↗ (opens in a new tab)

  CERT.at news · Published 2026-01-27 · First collected 2026-10-24

• Bermuda weighs digital ID options as supplier deadline approaches ↗ (opens in a new tab)

  Biometric Update · Published 2026-10-23 · First collected 2026-10-24

• CVE-2026-87912 and CVE-2026-87913: Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops and MCP Server ↗ (opens in a new tab)

  AWS Security Bulletins · Published 2026-10-23 · First collected 2026-10-24

• Microsoft says ConnectWise breach let Chinese spies loose on 2,250 cloud tenants ↗ (opens in a new tab)

  www.theregister.com - Articles · Published 2026-10-22 · First collected 2026-10-24

• Marvell, Microsoft & Oracle Work to Standardize Data Center Hardware Security ↗ (opens in a new tab)

  darkreading · Published 2026-10-21 · First collected 2026-10-24

• Children’s Data Stolen After Ransomware Attack Compromises ‘Password1’ Account ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-21 · First collected 2026-10-24

• Cloudflare warns fixing botched eMudhra certs goes beyond browsers ↗ (opens in a new tab)

  iTnews · Published 2026-10-21 · First collected 2026-10-24

• ConnectWise customers hit by supply-chain attack linked to compromised API secret ↗ (opens in a new tab)

  CyberScoop · Published 2026-10-20 · First collected 2026-10-24

• Aggiornamenti di sicurezza per prodotti MongoDB ↗ (opens in a new tab)

  CSIRT Italia news · Published 2026-10-19 · First collected 2026-10-24

• Kwetsbaarheid in Cisco Secure Email Gateway met actief misbruik: update nu ↗ (opens in a new tab)

  NCSC NL news · Published 2026-10-15 · First collected 2026-10-24

• US raids laptop farms used to funnel $3 million to North Korea in fake candidate scam ↗ (opens in a new tab)

  Latest from ITPro in Security · Published 2026-10-14 · First collected 2026-10-24

• GitLab lukker kritisk CVSS 10,0-sårbarhed i CE og EE ↗ (opens in a new tab)

  DKCERT news · Published 2026-10-14 · First collected 2026-10-24

• NCA cracks down on foreign cyber fraudsters ↗ (opens in a new tab)

  ComputerWeekly.com · Published 2026-10-13 · First collected 2026-10-24

• Omisión de autenticación en múltiples productos de Frappe Technologies ↗ (opens in a new tab)

  INCIBE-CERT news · Published 2026-10-08 · First collected 2026-10-24

• Shaq Got Hacked. Now He’s Pitching for a VPN ↗ (opens in a new tab)

  WIRED Security · Published 2026-10-07 · First collected 2026-10-24

• Hackers obtain counterfeit TLS certificates for Google and other large services ↗ (opens in a new tab)

  Security - Ars Technica · Published 2026-10-06 · First collected 2026-10-24

• Asos warns customer data may be compromised after ‘unauthorised’ app access ↗ (opens in a new tab)

  Data and computer security | The Guardian · Published 2026-10-06 · First collected 2026-10-24

• Antar du vår utmaning? / Do you accept our challenge? ↗ (opens in a new tab)

  CERT-SE news · Published 2026-10-02 · First collected 2026-10-24

• Cyber Weather August 2026 ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-09-29 · First collected 2026-10-24

• Tallinnas kohtusid Euroopa usaldusteenuste regulaatorasutuste eksperdid ↗ (opens in a new tab)

  RIA / CERT-EE (Estonian) · Published 2026-09-23 · First collected 2026-10-24

• Riasztás Cisco szoftvereket érintő sérülékenységekről ↗ (opens in a new tab)

  NCSC Hungary news · Published 2026-09-17 · First collected 2026-10-24

• The Centre for Cybersecurity Belgium celebrates five years of BE-CYBER ↗ (opens in a new tab)

  CERT.BE news · Published 2026-09-16 · First collected 2026-10-24

• How to protect operational technology from targeted cyber attacks ↗ (opens in a new tab)

  Cyber Security Hub Articles · Published 2026-09-16 · First collected 2026-10-24

• Joint guidance on detecting and mitigating Active Directory compromises ↗ (opens in a new tab)

  Canadian Centre for Cyber Security news · Source updated 2026-09-15 · First collected 2026-10-24

• Upozorenj: kritična ranjivosti u MikroTik RouterOS-u. Preporučuje se hitna nadogradnja. ↗ (opens in a new tab)

  CERT.hr news · Published 2026-09-07 · First collected 2026-10-24

• Kazimi raises €2.2M pre-seed to tackle bot activity in mobile marketing ↗ (opens in a new tab)

  Cybersecurity - Tech.eu · Published 2026-08-24 · First collected 2026-10-24

• Satellite Imagery Documents New Border Patrol Road Construction in Big Bend National Park ↗ (opens in a new tab)

  bellingcat · Published 2026-08-20 · First collected 2026-10-24

• Microsoft Links Hotel Wi-Fi Attacks Stealing Microsoft 365 Accounts to Russian Hackers ↗ (opens in a new tab)

  Cybersecurity News: Threats, Vulnerabilities & Privacy Updates - gHacks · Published 2026-08-06 · First collected 2026-10-24

• CISO's guide to data obfuscation ↗ (opens in a new tab)

  Search Security Resources and Information from TechTarget · Published 2026-07-28 · First collected 2026-10-24

• Progress in strengthening cybersecurity ↗ (opens in a new tab)

  Swiss GovCERT news · Published 2026-05-20 · First collected 2026-10-24