-
A newly disclosed FalconFlank zero-day reportedly allows attackers to gain SYSTEM-level privileges on fully updated Windows devices running the CrowdStrike Falcon sensor. CrowdStrike says it is investigating the claims and has issued mitigation guidance for customers. FalconFlank exploit targets macro-remediation feature An anonymous researcher known as Nightmare Eclipse released the proof-of-concept exploit on September 4.…
-
Microsoft has resolved an Exchange Online outage that delayed emails sent to and received from external domains. The incident also triggered intermittent “Server busy” errors for users across multiple mailboxes. Exchange Online outage affected external email flow Microsoft first acknowledged the issue at 02:19 AM EDT on September 4 under incident reference EX1467029. The Exchange…
-
A group of UK politicians wants the government to consider an AI kill switch that could halt artificial intelligence systems during a serious national security emergency. Liberal Democrat Lord Tim Clement-Jones is leading the proposal through an amendment to the Cyber Security and Resilience Bill, which is now being considered by the House of Lords.…
-
A security researcher claims he accessed a tech company’s email account after the company failed to respond to vulnerability reports for about two months. The researcher, known as Zachi, said he discovered flaws in an undisclosed app developed by Betterapp Tech. He later claimed he contacted the company from one of its own email addresses…
-
A Thomson Reuters breach affected court systems across 11 US states, the US Virgin Islands and Ontario, Canada, after an unauthorised party accessed files on its C-Track case management platform. The company said it detected suspicious activity in one of its cloud environments on June 30. A later investigation found that certain C-Track files had…
-
France’s data protection authority has fined Hôpital privé de la Loire €500,000 after a data breach exposed sensitive information belonging to more than 727,000 people. The French hospital data breach affected 524,867 patients and 202,246 people listed as trusted third parties. The CNIL found that the hospital failed to implement adequate safeguards for the data.…
-
A Coder registry compromise allowed attackers to distribute malicious Terraform modules containing credential-stealing code to a subset of users. The attackers accessed Coder’s Cloudflare infrastructure and added unauthorised servers to the pool behind the company’s module registry. Coder has released patched versions and advised potentially affected users to rotate exposed secrets. Rogue servers delivered malicious…
-
Hewlett Packard Enterprise has released security updates for a critical ArubaOS-CX vulnerability that could allow unauthenticated attackers to execute code remotely with elevated privileges. Tracked as CVE-2026-73749, the flaw affects the operating system used across HPE Aruba Networking enterprise switches. HPE strongly urges customers to upgrade to a fixed release. Critical flaw allows remote code…
-
A widespread ChatGPT outage is disrupting conversations, login and numerous AI features across OpenAI’s platform. The incident also affects Codex services. OpenAI began investigating the issue after reports of elevated errors emerged at about 10:58 AM ET on September 3. The company has not yet provided a timeline for a complete fix. Major ChatGPT features…
-
A Claude outage is causing elevated errors for users sending requests to several Anthropic AI models. The company confirmed the incident on September 3 and said it had identified the cause. The disruption began at about 9:41 AM ET. Anthropic is working on a fix, but the issue remained ongoing in its latest update. Multiple…