Breaking news and updates from the world of technology.
A small-scale UK energy generator was knocked offline for four days last month in what officials describe as the first successful cyberattack of its kind on British energy infrastructure, amid a wider campaign against Western critical systems.
A newly disclosed Defender vulnerability (CVE-2026-69414) bypasses Microsoft's July security patch and gives any local attacker full SYSTEM privileges — with no fix available.
Security researchers at Socket linked 77 Firefox extension identities to a coordinated campaign; 40 actively steal wallet seed phrases and private keys, some after posing as sports-score utilities for months.
A joint advisory from NSA, CISA, FBI, DOE, and EPA describes an active campaign using AI-generated Python scripts to attack Siemens S7 industrial controllers across six critical sectors.
T-Mobile's cybersecurity chief and three colleagues traveled to a Bellevue data center and snipped a cable by hand to sever a compromised connection during the Salt Typhoon intrusions — avoiding the large-scale breach that hit AT&T, Verizon, and other carriers.
CVE-2026-33824 lets unauthenticated attackers execute code on any Windows 10, 11, or Server system via a double-free bug in the IKE VPN component — CISA added it to its exploited-vulnerabilities catalog on August 18.
CVE-2026-19478, rated CVSS 9.4, allows unauthenticated remote attackers to destroy public GitLab projects — the third critical GraphQL bug the platform has patched this year.
North Korea's Lazarus Group has been actively exploiting a Windows kernel zero-day (CVE-2026-68820) as part of Operation Dream Job, deploying a new rootkit variant and a previously undocumented backdoor against defense and aerospace targets.
The cybersecurity giant is buying an AI-agent security startup that stress-tests autonomous systems across 50+ sandboxed environments, extending its FortiAIGate protection from language models to the agents and tools built on top of them.
A suspected Chinese-speaking threat actor weaponized a severe directory-traversal vulnerability in Broadcom VMware vCenter just five days after it was patched, deploying Babuk-derived ransomware against victims worldwide.
A presidential memorandum signed August 12 lets vetted US companies carry out surveillance and disruptive cyber operations against foreign transnational criminal organizations, under direct DOJ and DHS oversight, marking a major reversal of the long-standing ban on private hack-back activity.
Poland's Digital Affairs Minister confirmed the theft of over 2 terabytes of patient data from MyDr, one of the country's largest electronic medical records platforms, in what officials are calling an unprecedented cyberattack.