Category: Cyber Security
-
A critical Ghostscript PDF flaw could allow attackers to execute code on servers that process specially crafted documents. Tracked as CVE-2026-39919, the vulnerability affects PDF rendering workflows, including certain WordPress thumbnail-generation configurations. Artifex fixed the issue in Ghostscript 10.08.0 on September 8. However, researchers said exploitation depends heavily on the target environment, and they had…
-
The TFG London cyberattack has disrupted IT systems serving fashion retailers Hobbs, Whistles and Phase Eight. Several systems remained unavailable when the company disclosed the incident on October 13, although physical stores continued trading. The company detected the attack on October 11 and launched its incident response and business continuity plans. It also brought in…
-
Ivanti has urged customers to patch an Ivanti Connect Secure zero-day that attackers are actively exploiting. Tracked as CVE-2026-104935, the authentication bypass vulnerability allows unauthenticated attackers to execute arbitrary commands on affected appliances. The company reported limited exploitation when it disclosed the issue on October 13. Meanwhile, researchers linked the vulnerability to an attack chain…
-
A critical Docker Hub flaw allowed attackers to impersonate other users and potentially download, publish, or delete container images. Docker has fixed the vulnerability, tracked as CVE-2026-105445, and says its investigation found no evidence of exploitation. The issue involved personal access tokens transferred during account conversions. Because attackers could retain a working token linked to…
-
Norway’s privacy regulator has fined Microsoft-owned advertising company Xandr NOK 92 million, approximately $9.6 million, over unlawful processing and sharing of Grindr user data. The Xandr GDPR fine is the largest penalty Norway’s Data Protection Authority has issued. The regulator, Datatilsynet, said the violations affected thousands of Norwegian users. Its findings concern advertising activity between…
-
A French supermarket cyberattack reportedly disrupted refrigeration systems at 250 to 350 stores, forcing retailers to remove fresh and frozen products. Attackers allegedly triggered automatic defrost functions remotely, raising temperatures inside food storage and display units. The incident began overnight on October 11 and affected several major retail chains. Reports named Intermarché, Coopérative U, Carrefour…
-
The Ahold Delhaize cyberattack has forced the supermarket group to disconnect some systems as it investigates a security issue within its network. Although stores remain open, reports indicate disruptions to customer services and employee tools across several brands. The retailer confirmed the incident on October 12. Its teams are assessing the problem and taking protective…
-
A maximum-severity GitLab code execution vulnerability has prompted an urgent warning for administrators running self-managed installations. The flaw could allow remote attackers to execute arbitrary code without signing in. GitLab disclosed the issue on October 12 and released patches for affected Community Edition (CE) and Enterprise Edition (EE) versions. Meanwhile, GitLab.com already runs the patched…
-
Researchers have identified 8,547 exposed energy systems connected to solar and wind installations across 35 European countries. The findings include management interfaces and control panels accessible through the public internet. Internet intelligence company Modat surveyed renewable energy infrastructure in 40 countries across the EU, EFTA and EU candidate states. Although most interfaces displayed login screens,…
-
Two sextortion suspects allegedly threatened victims with manipulated images designed to falsely portray them as engaging in sexual activity with minors. US prosecutors say the scheme pressured some victims into emptying their bank accounts, yet payment did not always stop the material from spreading. Authorities arrested Patricia Joanna Almonte-Frías and Rineldys Feliciano Díaz-Cuevas in the…