1. Executive summary Threat actors are exploiting a zero-day remote code execution flaw — dubbed "StyleSmuggler" by Sansec — in Adobe Commerce and Magento to
1. Executive summary The UK House of Lords Grand Committee has scrutinised the Cyber Security and Resilience (CSR) Bill, with cross-party peers tabling amendments to
1. Executive summary The UK NCSC has published guidance on "shadow AI" — AI tools used by employees outside approved systems and processes, which the
1. Executive summary A four-year business email compromise (BEC) and network-intrusion campaign has stolen more than €35 million from French notaries, affecting more than
1. Executive summary On 6 September 2026, the ransomware group "Panzer" listed the German electronics and microelectronics R&D network edacentrum — publicly associated
1. Executive summary Attackers are hijacking MikroTik routers whose SSH service is reachable from the internet, gaining full administrative control without authentication, per a CERT Polska
1. Executive summary On 3 September 2026, a security researcher operating as Chaotic Eclipse (aliases Nightmare-Eclipse, MSNightmare, INFINITE NIGHTMARE) published a working privilege-escalation proof-
1. Executive summary On 2026-09-05, the ransomware operator tracked as "qilin" publicly listed The Big Table (www.bigtablegroup.com, GB) as a
1. Executive summary On 5 September 2026, ransomware group "thegentlemen" listed Leo Schachter Diamonds (US, leoschachter.com) as a victim on its leak site.
1. Executive summary Unidentified threat actors exploited CVE-2026-63077 (CVSS 9.8, critical) — an unauthenticated deserialization-of-untrusted-data flaw in JetBrains TeamCity permitting arbitrary
1. Executive summary On 5 September 2026, the ransomware operator "thegentlemen" listed the Polish pharmacy chain Zdrowit S.A. (Bytom, Silesia) as a victim
1. Executive summary On 5 September 2026, ransomware group "thegentlemen" listed US healthcare technology firm Veradigm (veradigm.com) on its leak site, claiming the