European Commission hacked via AWS: when public cloud becomes an attack vector
The European Commission's AWS account was compromised, highlighting cloud security risks for government institutions and the shared responsibility model.
The European Commission's AWS account was compromised, highlighting cloud security risks for government institutions and the shared responsibility model.
Three vulnerabilities discovered in LangChain and LangGraph expose filesystem data, environment secrets, and conversation history. 52 million weekly downloads.
The new US cyber strategy published March 6, 2026 reforms regulations, deploys offensive capabilities, and impacts European businesses operating in the US.
Foster City, California declared a state of emergency after a ransomware attack paralyzed municipal services for over a week.
The GlassWorm campaign compromised 72 Open VSX extensions to target developers. Attack analysis and protection measures for development teams.
Ransomware group Qilin claims an attack on Malaysia Airlines. Passenger bookings, HR files, vendor contracts, and internal communications compromised.
PolyShell, a critical vulnerability in Magento and Adobe Commerce, allows unauthenticated file upload and execution. 50+ IPs actively scanning.
Payment skimmers now use WebRTC data channels to exfiltrate card data, bypassing WAFs and traditional security controls. Detection guide.
Citrix patches CVE-2026-3055 (CVSS 9.3), a NetScaler ADC/Gateway flaw allowing sensitive memory reads via SAML. Analysis and remediation.
Analysis of CVE-2026-20131, a deserialization flaw in Cisco Secure Firewall Management Center. Maximum CVSS score, exploited by Interlock group since January 2026.
The EU AI regulation enters full application on August 2, 2026. Cybersecurity requirements, timeline, penalties, and preparation guide for CISOs.
CVE-2026-22557 in Ubiquiti UniFi Network Application allows full system takeover. Hardening guide and exposure verification.