A Check Point disclosure describes fake voicemail notifications using recipient-domain spoofing and script-capable SVG attachments. Its figures show targeting, not confirmed compromise.
Read More
UK, US and Dutch agencies have documented successful Windows spyware infections and data exfiltration in an Iran-attributed campaign targeting dissidents, activists and journalists.
Read More
Apple has released iOS 27 and iPadOS 27 with fixes spanning kernel, Bluetooth, media, privacy and account security, while Siri AI starts a hardware-limited English beta.
Read More
Reddit confirmed malicious ads from a compromised HBO Max advertising account, while researchers reported 108 ads and cross-platform malware delivery.
Read More
Affected self-managed GitLab CE and EE installations require branch-specific upgrades after CISA confirmed exploitation of CVE-2026-85706.
Read More
New NASCIO and GDIT findings show a gap between whole-of-state cyber planning and the funding and services available to local infrastructure operators.
Read More
The NSA is reportedly weighing five mission organisations, but no official plan yet defines their cyber authority, reporting lines or implementation schedule.
Read More
Employers are being urged to connect identity, payment and device checks as North Korean remote-work schemes expand their use of human stand-ins.
Read More
Brevo says a SAML SSO authorisation failure exposed 138 client accounts, including abuse of Trezor’s newsletter channel to send phishing to roughly 347,000 addresses.
Read More
Mantax Otax abuses granted Android permissions to steal data and disrupt devices. Android 10 and later limit broad file encryption but are not proven immune to its other functions.
Read More