News & investigations · Archive

News & investigations

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• Certification authority eMudhra defends its laughably weak private keys ↗ (opens in a new tab)

  www.theregister.com - Articles · Published 2026-10-22 · First collected 2026-10-24

• 'PHP2Shell' Bugs Signal Red Alert for Security Industry ↗ (opens in a new tab)

  darkreading · Published 2026-10-21 · First collected 2026-10-24

• Salesforce snaps up Braze ↗ (opens in a new tab)

  iTnews · Published 2026-10-20 · First collected 2026-10-24

• OpenCode Breach Could Affect OpenAI, Anthropic and Google ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-19 · First collected 2026-10-24

• In het nieuws: cyberaanvallen op levensmiddelensector ↗ (opens in a new tab)

  NCSC NL news · Published 2026-10-13 · First collected 2026-10-24

• Another major fashion retailer hit by cyber attack ↗ (opens in a new tab)

  Latest from ITPro in Security · Published 2026-10-13 · First collected 2026-10-24

• The Security Interviews: A post-Mythos reality check ↗ (opens in a new tab)

  ComputerWeekly.com · Published 2026-10-13 · First collected 2026-10-24

• MCP for agent-to-agent comms may be the riskiest protocol you've never heard of ↗ (opens in a new tab)

  Security - Ars Technica · Published 2026-10-05 · First collected 2026-10-24

• ICE Has Been Dumping Protester Photos Into a Palantir Database ↗ (opens in a new tab)

  WIRED Security · Published 2026-10-02 · First collected 2026-10-24

• Täiendatud: Riigi autentimisteenus töötab taas tavapäraselt ↗ (opens in a new tab)

  RIA / CERT-EE (Estonian) · Published 2026-09-21 · First collected 2026-10-24

• Cyber security risks lurk in popular messaging apps ↗ (opens in a new tab)

  Cyber Security Hub News · Published 2026-09-16 · First collected 2026-10-24

• The house is locked, but how can you be sure there isn’t an intruder inside? ↗ (opens in a new tab)

  CERT.BE news · Published 2026-09-11 · First collected 2026-10-24

• The Cyber Centre urges heightened vigilance amid global tensions and high-profile events ↗ (opens in a new tab)

  Canadian Centre for Cyber Security news · Source updated 2026-09-04 · First collected 2026-10-24

• Riasztás Magyarország Ügyészségének nevével visszaélő ransomware támadásokkal kapcsolatban ↗ (opens in a new tab)

  NCSC Hungary news · Published 2026-09-03 · First collected 2026-10-24

• As the school year begins, it is a good time to remind children about safe internet use ↗ (opens in a new tab)

  NCSC-FI news · Published 2026-08-11 · First collected 2026-10-24

• CISO's guide to privileged identity management ↗ (opens in a new tab)

  Search Security Resources and Information from TechTarget · Published 2026-07-24 · First collected 2026-10-24

• OpenAI Confirms Its Models Breached Hugging Face Production Systems During Cyber Benchmark Testing ↗ (opens in a new tab)

  Cybersecurity News: Threats, Vulnerabilities & Privacy Updates - gHacks · Published 2026-07-22 · First collected 2026-10-24

• ‘SUPER, right?’ – launch of the 2026 national cybersecurity awareness campaign ↗ (opens in a new tab)

  Swiss GovCERT news · Published 2026-04-09 · First collected 2026-10-24

• Latvia and Canada Strengthen NATO Cyber Defenses in Threat Hunting Workshop ↗ (opens in a new tab)

  CERT.LV news · Published 2025-11-25 · First collected 2026-10-24

• CVE-2026-84942 - Stored Cross-Site Scripting via Vega Expression Function Bypass in OpenSearch Dashboards ↗ (opens in a new tab)

  AWS Security Bulletins · Published 2026-10-23 · First collected 2026-10-24

• South Korea weighs changes to permanent identity numbers after data breaches ↗ (opens in a new tab)

  Biometric Update · Published 2026-10-23 · First collected 2026-10-24

• PHP blames supply chain security biz Chainguard for putting huge chunks of the web at risk ↗ (opens in a new tab)

  www.theregister.com - Articles · Published 2026-10-21 · First collected 2026-10-24

• OVHcloud GitHub Compromise Tied to GlassWorm Threat Actors ↗ (opens in a new tab)

  darkreading · Published 2026-10-21 · First collected 2026-10-24

• In Pictures: Preemptive Security Rapid7 Melbourne roundtable ↗ (opens in a new tab)

  iTnews · Published 2026-10-20 · First collected 2026-10-24

• ConnectWise Shuts Off Cloud Services After ‘Unauthorized Access’ to Microsoft 365 Tenants ↗ (opens in a new tab)

  Infosecurity Magazine · Published 2026-10-19 · First collected 2026-10-24

• French fridges hacked in country-wide supermarket attack ↗ (opens in a new tab)

  Latest from ITPro in Security · Published 2026-10-13 · First collected 2026-10-24

• Kwetsbaarheden in HPE Networking AOS-Switch met hoog risico ↗ (opens in a new tab)

  NCSC NL news · Published 2026-10-12 · First collected 2026-10-24

• Fraudster who targeted ransomware victims appears in US court ↗ (opens in a new tab)

  ComputerWeekly.com · Published 2026-10-09 · First collected 2026-10-24

• Hacks of 2 federal agencies in a month have spilled a bonanza of sensitive data ↗ (opens in a new tab)

  Security - Ars Technica · Published 2026-10-01 · First collected 2026-10-24

• Cyber criminals attack businesses in Adobe-themed phishing surge ↗ (opens in a new tab)

  Cyber Security Hub News · Published 2026-09-16 · First collected 2026-10-24