1. Executive summary Attackers are embedding hidden instructions in phishing emails so that AI assistants which summarise or triage a mailbox surface the attacker's
1. Executive summary BSI's Warn- und Informationsdienst re-issued a high-severity advisory covering multiple vulnerabilities in IBM DB2 on Cloud Pak for Data,
1. Executive summary Attackers are actively exploiting CVE-2026-85097, a maximum-severity flaw in the Bricksforge plugin for WordPress that lets an unauthenticated attacker upload
1. Executive summary SonicWall patched four vulnerabilities in its Secure Mobile Access (SMA) 1000 appliances on 2026-10-07, including CVE-2026-102255, a pre-authentication
1. Executive summary On 2026-10-09 the ransomware.live leak site listed Deloitte (US) as a victim of the group calling itself "thegentlemen"
1. Executive summary Booz Allen Hamilton's OT lab ran two unnamed frontier AI models through eight autonomous attack scenarios against a multi-vendor industrial
1. Executive summary A ransomware group operating under the name "safepay" listed dwi-bau.de, a German construction-sector company specialising in metal roof
1. Executive summary At least three user accounts at Pays, a Funen-based IT company, were reportedly protected by the password "123456" when attackers
1. Executive summary On 2026-10-09 the ransomware.live leak site listed Bayer (DE) as a victim of a group calling itself "Black X&
1. Executive summary A ransomware group calling itself "thegentlemen" listed Refako Autodele (refako.dk), a Danish truck and trailer parts retailer based in Odense,
1. Executive summary A ransomware group tracked as "thegentlemen" listed SAS H2O MICHEL, a French commissaire de justice firm based in Tours and Chinon
1. Executive summary A ransomware group calling itself Black X listed lopay, a UK fintech that provides card and mobile payment acceptance and settlement services to