Current analysis, technical guidance and reporting across security, infrastructure, automation and artificial intelligence.
Attackers stole historical CSDD payment-receipt data affecting 1.2 million people. The breach combined national-scale identity data with vehicle, address, and payment history dating back to 2008.
Oracle’s August 2026 security update contains 943 new patches. Fusion Middleware alone accounts for 262, including 182 vulnerabilities that may be remotely exploitable without credentials.
A cyberattack on Latvia’s Road Traffic Safety Directorate exposed payment-receipt records belonging to 1.2 million people and 200,000 legal entities. The archive stretched back to 2008 and linked identity data to addresses, vehicle registration plates, payment dates, and amounts. The…
A public exploit for CVE-2026-14669 turns a low-privilege PostgreSQL login into host-level command execution. The released chain is build-specific, but the trust boundary has been crossed in a reproducible lab.
GitLab's out-of-band critical patch closes an unauthenticated GraphQL path that could modify or delete public projects and user data. Self-managed operators should upgrade immediately and review retained activity without assuming compromise.
A faulty provider update enabled approximately €30 million in fraud. The case shows why payment integrity needs controls beyond software testing.
MyDr cannot yet confirm the breach scope, while officials cite nearly 19 million people. The platform concentration risk is already clear.
Ukraine says cyber disruption amplified strikes on Wildberries warehouses. The effects remain unverified, but the combined-operation model matters.
An expired domain can retain connections.
Citrix classified CVE-2026-8452 as a memory overflow. Public research points to unauthenticated root code execution on an internet-facing identity gateway.
JWR combines 44 phishing pages with an encrypted WebSocket and live operator commands, turning a fake page into an adaptive fraud session.
A permissive private cellular APN connected a compromised wind farm to a Polish power plant, turning assumed isolation into an attack path.
