Security briefing · Archive
News & investigations · Archive
Browse collected headlines by topic and follow links to the original publishers.
News & investigations
Dates are publishers’ publication dates, source update dates, or CISA catalog-added dates. First collected records when SecSIG first saw the entry.
Groups Associated With India’s Far-Right Receive Millions Through US Donor-Advised Funds ↗ (opens in a new tab)
Sikkerhetsoppdatering tilgjengelig for Citrix Netscaler ↗ (opens in a new tab)
Cyber Security Month 2026: Oversharing – Share with care ↗ (opens in a new tab)
CRA - Reporting: The first two weeks ↗ (opens in a new tab)
US federal agencies fail to meet cyber security incident response requirements ↗ (opens in a new tab)
Microsoft Releases Emergency Windows Updates to Fix Remote Desktop Services Failures ↗ (opens in a new tab)
CERT.LV activity review Q2 2026 ↗ (opens in a new tab)
Germany is stepping up on defense — and Washington should celebrate ↗ (opens in a new tab)
New type of attack can slip past the defenses in your computer’s processor ↗ (opens in a new tab)
Соціальна інженерія у виконанні UAC-0145: компрометація у процесі працевлаштування ↗ (opens in a new tab)
CVE-2025-42611 – Authentication bypass in multiple RouterOS services caused by improper certificate validation ↗ (opens in a new tab)
Novos Fascículos sobre Golpes ↗ (opens in a new tab)
CVE-2026-89065 and CVE-2026-89066: Issue with projen - Path traversal and OS command injection ↗ (opens in a new tab)
Hackers Breach Enterprise Firewalls and VPNs, Exposing Over 70,000 Credentials ↗ (opens in a new tab)
Russian hackers collaborate on destructive cyberattack against Ukrainian logistics firm ↗ (opens in a new tab)
Bermuda weighs digital ID options as supplier deadline approaches ↗ (opens in a new tab)
Capcom Data Breach Exposes 11.7 Million Records: What Gamers Need to Know ↗ (opens in a new tab)
Why Caribbean Threats Cascade Into Global Cyber-Risk ↗ (opens in a new tab)
Quest Diagnostics warns of potential data theft after attack on lab service system ↗ (opens in a new tab)
eMudhra quits global TLS certificate market after compromise of CA signing keys ↗ (opens in a new tab)
Attacks on Tech Firms Behind Most Third-Party Data Breach Victims ↗ (opens in a new tab)
UK threatens subsea cable saboteurs with 14 years behind bars ↗ (opens in a new tab)
Iran’s Prince of Persia APT Hosts C&C in US for First Time Since 2016 ↗ (opens in a new tab)
Railway warns devs to rotate secrets after potential breach ↗ (opens in a new tab)
Russia-linked hackers use decentralised network in Ukraine cyberattack ↗ (opens in a new tab)
eMudhra kills its certificate business after researchers cracked its private keys in under a second ↗ (opens in a new tab)
The internet has broken – again. Shouldn’t the tech firms that make billions from it pay to fix it? | Chris Stokel-Walker ↗ (opens in a new tab)
Kwetsbaarheden in Gitlab CE en EE met een kritiek risico: update nu ↗ (opens in a new tab)
333 Tor exit nodes hijacked to intercept SSH traffic and retrieve plaintext email ↗ (opens in a new tab)
Accesso non autorizzato al portale TeamUpdraft e possibile esposizione dei dati dei clienti ↗ (opens in a new tab)