1. Executive summary Ten staff at East Suffolk and North Essex NHS Foundation Trust have been removed from duty or suspended after unauthorised access to the
1. Executive summary CVE-2026-88771 is a critical improper input validation flaw in Citrix NetScaler ADC and NetScaler Gateway that could let an unauthenticated attacker
1. Executive summary CVE-2026-88772 is a memory-buffer flaw in Citrix NetScaler ADC and NetScaler Gateway that can lead to remote code execution or
1. Executive summary The ransomware group tracked as qilin listed Revenga Smart Solutions, a Spanish company (gruporevenga.com), on its leak site on 2026-09-27.
1. Executive summary Two unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway, both reportedly enabling remote code execution, are being exploited in the
1. Executive summary CVE-2026-65660, a code injection vulnerability in Microsoft SharePoint rated CVSS 8.8 HIGH, is being actively exploited in the wild and
1. Executive summary UNC6240 (ShinyHunters, MITRE G1057) has resumed mass exploitation of CVE-2026-35273, a critical missing-authentication flaw in Oracle PeopleSoft Enterprise PeopleTools, after
1. Executive summary On 2026-09-25 the ransomware.live leak index recorded a victim entry for corisricambi.it, an Italian company, attributed to a group
1. Executive summary A ransomware group calling itself Wallstreet listed Ar Valve Resources, a Kent-based UK distributor of industrial valves, actuators, regulators and instrumentation, on
1. Executive summary Cameron John Wagenius, a 22-year-old U.S. Army soldier who operated as "Kiberphant0m," was sentenced in Seattle on 2026-
1. Executive summary Kiteworks told customers to shut down its platform for a six-hour window on Saturday 26 September 2026 after receiving what its CISO
1. Executive summary A ransomware group tracked as Wallstreet listed Beatus Cartons, a UK privately owned manufacturer of printed folding cartons and packaging, on its leak