Banking and real time payment systems
Everything filed under sectors in our cybersecurity coverage, the 15 reports filed on it so far.
Critical Ghostscript flaw enables remote code execution via PDF uploads
CVE-2026-39919, a heap buffer overflow in Ghostscript versions 9.21 through 10.07.1, allows unauthenticated remote code execution when processing...
Norway fines Microsoft's Xandr $9.6 million for Grindr data breach
Norway's Data Protection Authority has fined Microsoft-owned advertising firm Xandr $9.6 million for unlawfully processing and sharing sensitive...
GitHub and Microsoft launch ReviewBench AI code review benchmark
GitHub and Microsoft have released ReviewBench, an open benchmark for evaluating AI code review tools using 219 real-world pull requests.
F5 Patches Critical BIG-IP APM Zero-Day Exploited for RCE
F5 has released hotfixes for a critical zero-day vulnerability, CVE-2026-94127, in BIG-IP APM. The flaw, a heap-based buffer overflow with a CVSS...
AI-Generated Exploit and Token Flaw Breached OpenAI Internal Systems
Researchers used an AI model to build an exploit for an unpatched library flaw, chaining it with an OpenAI sign-in token vulnerability to access...
CISA Issues Guidance on Deploying Cyber Decoy Systems
The U.S. Cybersecurity and Infrastructure Security Agency has released new guidance for critical infrastructure operators on deploying decoy systems.
KTH Researchers Train Agent to Reset OT Systems Under Attack
Researchers at KTH Royal Institute of Technology have developed an autonomous intrusion response agent for industrial control systems.
GitGuardian Honeytoken Deploys Decoys to Catch Credential Theft
GitGuardian's Honeytoken service uses decoy credentials deployed via MDM to detect credential harvesting in real time.
Gigabud Trojan Clones Banking Apps to Bypass Fraud Detection
The Gigabud Android banking trojan now uses a weaponized app cloner called Vwork to isolate fraudulent transactions in a separate work profile.
Akeyless launches real-time control layer for AI agents
Akeyless has released Agentic Runtime Authority, a real-time enforcement layer that blocks unauthorized AI agent actions in production environments.
Mars Security automates threat intelligence
Mars Security has launched a real-time detection capability that automatically converts threat advisories from sources like CISA and Mandiant into...
Breeze Comet targets Brazilian payments
A threat actor known as Breeze Comet has been manipulating Brazilian payment systems since 2024, executing hundreds of fraudulent transactions after...
ToxicPanda 2.0 and GoldDigger Expand Android Banking Attacks
Cybersecurity researchers have discovered updates to the ToxicPanda and GoldDigger Android malware.
OpenAI Halts Frontier RL Training to Strengthen AI Safety Measures
OpenAI temporarily pauses reinforcement learning training for its advanced AI models to enhance monitoring, alignment, and security safeguards. The...
Elementor Pro Flaw Exposes WordPress Sites to Remote Code Execution
A critical vulnerability in the Elementor Pro plugin allows unauthenticated attackers to upload PHP files and execute code on affected systems.