News that matters, without the noise.

UK Legal Aid Agency Hack Scope Widens After Forensic Review

Most of the data is related to applications, claims, and payments submitted between 2007 and 2025. The post

Is AI pentesting as good as a human pentester?

AI pentesting can uncover vulnerabilities missed by human testers, but it also has limitations in consistency, risk assessment,

AI Uprising? That’s Not the Scary Part.

UK Legal Aid Agency hack worse than thought, with stolen records dating back to 1978

A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously

Suspected Kazakhstan-linked hackers target governments across former Soviet states

A roughly 2-year-old cyber-espionage campaign against Central Asian states appears to originate in Kazakhstan, researchers said.

NGINX Fixes 5 Flaws, Including Possible RCE and a TLS Bug That May Skip Client-Cert Checks

NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release

Next.js Ships Out-of-Band Patch for Two Critical RCE Flaws in Caching and SVG Processing

Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along

RHSA-2026:83562: Important: rpcbind security update

An update for rpcbind is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has

Juniper Networks security advisory (AV26-1043)

<article data-history-node-id="8376" about="/en/alerts-advisories/juniper-networks-security-advisory-av26-1043" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

Palo Alto Networks security advisory (AV26-1041) – Update 1

<article data-history-node-id="8374" about="/en/alerts-advisories/palo-alto-networks-security-advisory-av26-1041" class="cccs-threats full clearfix"> <div class="content"> <div class="layout layout–onecol"> <div class="layout__region layout__region–content"> <div data-block-plugin-id="extra_field_block:node:cccs_threats:links" class="block block-layout-builder

France: Internet-Exposed Danfoss Controllers Drop 71% After Cyber-Attack

France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack

AI Agents Create an Unseen Credential Surface That Exposes API Keys and Cloud Secrets

AI agents can expose API keys and cloud secrets during ordinary work, even when no malware is present.