News & investigations · Archive

News & investigations

Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.

• NÚKIB upozorňuje na kritické zranitelnosti v PHP - jediným řešením je aktualizace ↗ (opens in a new tab)

  NUKIB news · Published 2026-10-21 · First collected 2026-10-24

• Fortinet advarer om kritiske sikkerhedsrettelser ↗ (opens in a new tab)

  DKCERT news · Published 2026-10-21 · First collected 2026-10-24

• How to conduct a cyber-resilience assessment ↗ (opens in a new tab)

  Search Security Resources and Information from TechTarget · Published 2026-10-21 · First collected 2026-10-24

• UPOZORENJE: Kritične ranjivosti u PHP-u – objavljene zakrpe ↗ (opens in a new tab)

  CERT.hr news · Published 2026-10-21 · First collected 2026-10-24

• She Was the DEA’s Premier Crypto Detective. The Clues Led Straight to Her Own Family ↗ (opens in a new tab)

  WIRED Security · Published 2026-10-21 · First collected 2026-10-24

• Oppdatert varsel: To kritiske sårbarheter i PHP ↗ (opens in a new tab)

  NSM NCSC news · Published 2026-10-21 · First collected 2026-10-24

• Riasztás a PHP futtatókörnyezet kritikus sérülékenységeiről ↗ (opens in a new tab)

  NCSC Hungary news · Published 2026-10-21 · First collected 2026-10-24

• Múltiples vulnerabilidades en FacturaScripts ↗ (opens in a new tab)

  INCIBE-CERT news · Published 2026-10-20 · First collected 2026-10-24

• Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site ↗ (opens in a new tab)

  Krebs on Security · Published 2026-10-19 · First collected 2026-10-24

• Satellite Images Show Extent of Trump Admin’s Tree-Felling at DC Golf Course ↗ (opens in a new tab)

  bellingcat · Published 2026-10-15 · First collected 2026-10-24

• RIA koolitab tuhandeid vanemaealisi pettusi ära tundma ↗ (opens in a new tab)

  RIA / CERT-EE (Estonian) · Published 2026-10-15 · First collected 2026-10-24

• A quick note on incident classification ↗ (opens in a new tab)

  CERT.at news · Published 2026-10-13 · First collected 2026-10-24

• International dialogue: NCSC Director attends EU Cyber Week in Ireland and Singapore International Cyber Week ↗ (opens in a new tab)

  Swiss GovCERT news · Published 2026-10-12 · First collected 2026-10-24

• New Mexico Jury Finds Facebook Violated Consumer Protection Law More Than 43 Million Times ↗ (opens in a new tab)

  Cybersecurity News: Threats, Vulnerabilities & Privacy Updates - gHacks · Published 2026-10-01 · First collected 2026-10-24

• UAC-0277: ClickFix на скомпрометованих вебсайтах для поширення LUNEXSTEALER ↗ (opens in a new tab)

  CERT-UA news · Published 2026-09-30 · First collected 2026-10-24

• Fascículo da Cartilha de Segurança para Internet sobre IA ↗ (opens in a new tab)

  CERT.br news · Published 2026-09-24 · First collected 2026-10-24

• Inside a multi stage toll fraud operation targeting Poland ↗ (opens in a new tab)

  CERT.PL news · Published 2026-09-23 · First collected 2026-10-24

• CyberChess 2026 brings the international cybersecurity community together in Riga ↗ (opens in a new tab)

  CERT.LV news · Published 2026-09-22 · First collected 2026-10-24

• French Army wants to keep adversaries guessing on see-through battlefield ↗ (opens in a new tab)

  C4ISRNet · Published 2026-09-18 · First collected 2026-10-24

• Lincoln Laboratory summer research interns take on national security challenges ↗ (opens in a new tab)

  MIT News - Cybersecurity · Published 2026-09-17 · First collected 2026-10-24

• Viewing cyber security events in context ↗ (opens in a new tab)

  Cyber Security Hub Articles · Published 2026-09-16 · First collected 2026-10-24

• CVE-2026-25599 – Missing authentication and clear‑text data transmission of Orca heat pumps ↗ (opens in a new tab)

  SI-CERT news · Published 2026-04-17 · First collected 2026-10-24

• CVE-2026-18061 - XML External Entity (XXE) in AWS Advanced JDBC Wrapper RemoteQueryCachePlugin ↗ (opens in a new tab)

  AWS Security Bulletins · Published 2026-10-25 · First collected 2026-10-25

• Red-team report found OpenAI utterly failed to monitor its agents during Hugging Face attack ↗ (opens in a new tab)

  NCSC Finland Daily Security News · Published 2026-10-25 · First collected 2026-10-25

• Researchers Push Over 2 Million Updates to Remotely Disable Popcorn Time Updater That Could Fuel a Botnet ↗ (opens in a new tab)

  The Hacker News · Published 2026-10-24 · First collected 2026-10-24

• New York Knicks use fake championship ring offer in phishing test ↗ (opens in a new tab)

  SC Media · Published 2026-10-23 · First collected 2026-10-24

• Exposed to PHP2Shell? Cyber Experts Weigh in With Advice ↗ (opens in a new tab)

  darkreading · Published 2026-10-23 · First collected 2026-10-24

• Quest Diagnostics confirms data breach exposed patient records ↗ (opens in a new tab)

  BleepingComputer · Published 2026-10-23 · First collected 2026-10-24

• Quest Diagnostics Breach: What Patients Should Know ↗ (opens in a new tab)

  eSecurity Planet · Published 2026-10-23 · First collected 2026-10-24

• Meta hit with $25 billion fine for illegally sharing user data ↗ (opens in a new tab)

  CSO Online · Published 2026-10-23 · First collected 2026-10-24