Security Feed

1. Executive summary Huntress has disclosed worm-like activity in which backdoored ConnectWise ScreenConnect clients distribute a four-stage VBScript chain to newly connected

1. Executive summary Check Point's weekly intelligence report for 7 September 2026 carries three actively exploited vulnerabilities that demand immediate attention from

1. Executive summary On 2026-09-07, security firm TantoSec published a working, unauthenticated remote-code-execution chain against Progress Telerik UI for ASP.

1. Executive summary Between late August and early September 2026, the security researcher known as Nightmare Eclipse (aliases Chaotic Eclipse, Infinite Nightmare, MSNightmare) published

1. Executive summary Threat actors are exploiting a zero-day remote code execution flaw — dubbed "StyleSmuggler" by Sansec — in Adobe Commerce and

1. Executive summary The UK House of Lords Grand Committee has scrutinised the Cyber Security and Resilience (CSR) Bill, with cross-party peers tabling

1. Executive summary The UK NCSC has published guidance on "shadow AI" — AI tools used by employees outside approved systems and processes,

1. Executive summary A four-year business email compromise (BEC) and network-intrusion campaign has stolen more than €35 million from French notaries, affecting

1. Executive summary On 6 September 2026, the ransomware group "Panzer" listed the German electronics and microelectronics R&D network edacentrum

1. Executive summary Attackers are hijacking MikroTik routers whose SSH service is reachable from the internet, gaining full administrative control without authentication, per a

1. Executive summary On 3 September 2026, a security researcher operating as Chaotic Eclipse (aliases Nightmare-Eclipse, MSNightmare, INFINITE NIGHTMARE) published a working privilege-

1. Executive summary On 2026-09-05, the ransomware operator tracked as "qilin" publicly listed The Big Table (www.bigtablegroup.com, GB)