The Russian state-backed threat group Turla has been using a new malicious toolset called 'Cereal' to intercept emails on Microsoft Exchange servers at government organizations. [...]
This page shows only the headline and the short summary. The full text is published by the original source.
The major cyber attacks of October 2026 were some of the year’s most consequential, and many of them started with access their victims already trusted. A cryptocurrency exchange lost billions through compromised engineer workstations in the Binance hot wallet heist, a backup provider’s cloud credential reached hundreds of Microsoft 365 tenants in the ConnectWise breach, […]
Microsoft researchers have demonstrated how small changes to an AI model can implant a hidden backdoor, causing an agent to execute an attacker’s command when a specific trigger appears. The technique, called Lazarus, requires no model retraining and allows the agent to behave normally during standard safety evaluations. The company has not observed threat actors weaponizing the technique, but says the research highl…
Microsoft’s November 2026 Patch Tuesday, released on November 10, 2026, fixes 1,094 vulnerabilities across Windows, Office, SQL Server, Exchange Server, SharePoint, Azure services, and developer tools. The total falls below October’s Patch Tuesday (1,413 flaws) but still makes this the second-largest monthly release on record. The release includes one zero-day and over 60 critical-rated vulnerabilities. […]
The US Cybersecurity and Infrastructure Security Agency (CISA) warned on Tuesday that hackers are now exploiting a high-severity Cisco BroadWorks vulnerability in attacks. [...]
