DigiCert Begins Notifying Customers After Data Breach
DigiCert has started notifying customers after unauthorized access to archived records containing contact details and, in some cases, identity documents.
Barracuda Says ESG Flaw Needs No Login
Barracuda now says CVE-2026-116606 needs no login, but attackers must reach the ESG administrative interface; chained flaws can lead to root access.
Chainalysis Begins Phased Restoration of KYT Services
Chainalysis has started restoring KYT and Address Screening through a phased rollout, while its Reactor and Data Solutions products remain offline.
MetaMask Says Attack Diverted 0.385 ETH in Staking Rewards
MetaMask says an attacker diverted 0.385 ETH in staking rewards, but customers' staked principal and wallet keys were not compromised.
Opera Reaches 100 Million Monthly Active Users on Desktop
Opera has surpassed 100 million monthly active users on desktop for the first time, marking a major milestone for the browser company.
Cristiano Ronaldo Retires from Portugal After 23 Years: Career, Records and Achievements
Cristiano Ronaldo retires from Portugal after 23 years, finishing with 234 appearances and 146 goals. Explore his complete career, trophies and records.
North Korea Recruits Young Talent for State Cyber Force
Reuters says North Korea selects talented middle-school students for cyber training as part of a state-backed force estimated at 8,400 people.
Microsoft Paint Patch for CVE-2026-83844 Is Hard to Find
Some Windows 11 PCs may still run an unpatched Paint build for CVE-2026-83844 despite Microsoft Store update checks.
METR Finds AI Is Speeding Up Anthropic’s Model Development
METR says Anthropic’s model benchmark progress accelerated 1.9 times since October 2025, with AI-assisted research driving much of the change.
Shopify Makes IP Allowlists Mandatory for Public Apps
Shopify will require public apps that use its Admin API to restrict token access by IP address or network, with enforcement deadlines beginning November 12.
Fake AI Event Invites Steal Microsoft and Google Accounts
Fake OpenAI, SpaceX and Anthropic event pages are using Kali365 and VoidProxy to steal corporate Microsoft and Google credentials, MFA responses and session cookies.
Anubis Ransomware Uses New Lindnor Backdoor in US Attack
Symantec says Anubis attackers used a new backdoor and 13 security-disabling tools in a U.S. intrusion, but the ransomware payload was blocked.
AIRDO, Solaseed Air Disclose Customer Email Breach
AIRDO and Solaseed Air say attackers accessed an external email-delivery system, exposing customer email addresses and disrupting booking and flight-notification messages.
Loading
