1. Executive summary Siemens has patched a DLL sideloading flaw in Siemens Software Center, tracked as CVE-2026-110936, which it says has been exploited in
1. Executive summary Forescout Research (Vedere Labs) has disclosed a ClickFix delivery platform it calls ROMULUS, which serves bogus landing pages that trick users into running
1. Executive summary A ransomware group calling itself "payload" listed Brüninghoff Group, a German construction and prefabrication manufacturer headquartered in Heiden with around 700
1. Executive summary The ransomware group tracked as payload listed BW Office World, a German online retailer of office furniture and supplies trading at bw-officeworld.
1. Executive summary The qilin ransomware group listed Johnson & Pace, a UK victim, on its leak site on 2026-10-19. The listing is the
1. Executive summary The qilin ransomware group listed Toyota Canarias, a Spanish Toyota dealership network, on its leak site on 2026-10-19. The listing is
1. Executive summary The incransom extortion group listed SEETEL Hotel GmbH & Co. Betriebs KG (Seetelhotels.de), a German hotel chain, on its leak site on
1. Executive summary A credential belonging to the ConnectWise Cloud Backup application (formerly SkyKick) was used on 2026-10-15 to authenticate as the backup service
1. Executive summary The qilin ransomware group listed CREDIN, a Portuguese entity (www.credin.pt), on its leak site on 2026-10-19. The listing is
1. Executive summary Two Windows flaws, CVE-2026-21510 (CVSS 8.8 HIGH, CWE-693) and CVE-2026-32202 (CVSS 4.3 MEDIUM, CWE-693), were
1. Executive summary Rapid7 disclosed three vulnerabilities in Eptura Archibus Web Central, a facilities and real estate management platform that Eptura states was used by over
1. Executive summary Rank Math, the vendor of the Rank Math SEO plugin for WordPress, has disclosed that copies of its paid Rank Math PRO product