Security JournalThreats, systems & the work of defence
Reading index Source-attributed reporting and analysis on cybersecurity, vulnerabilities, identity and digital defence.
100 articles · Original source datesHackers have started exploiting a critical-severity vulnerability in Node-RED to deploy various payloads, vulnerability intelligence company VulnCheck reports. Node-RED is a low-code, flow-based programming…
SecurityWeek · 2 min readGoogle and its partners dismantled a backdoor called XCPE that had enrolled more than 1.3 million set-top boxes in a botnet. The result of the investigation into the malware operation is the striking part:…
Security Affairs · 6 min readThe U.K. will likely face artificial intelligence cyberattacks on its critical infrastructure by 2028 as criminals and states, including China and Russia, increasingly use AI in their cyber activity, Britain’s…
SecurityWeek · 3 min readGoogle on Monday announced the dismantling of XCPE (aka X.CPE), a backdoor and botnet of more than 1.3 million Android set-top boxes. The malware was developed and deployed by Videostrong Technology, a…
SecurityWeek · 2 min readThe NATO Cooperative Cyber Defence Centre of Excellence (CCDCOE) kicked off Crossed Swords 2026 in Tallinn, Estonia, on Monday, with the exercise’s execution phase set to run through Friday. More than 250…
SecurityWeek · 2 min readMore than 100 stores in several European countries saw their fridges and freezers heat up overnight from Sunday to Monday, and several retailers have blamed a cyberattack. The incidents closely resemble the…
SecurityWeek · 4 min readNIS2 board accountability gives directors a more direct role in cybersecurity. Under Article 20, the management bodies of essential and important entities must approve the cybersecurity risk-management…
Security Affairs · 5 min readThe German government is warning politicians and public figures that they were targeted by government-backed spyware. The warning follows Apple’s notifications, which began reaching iPhones on October 29,…
Security Affairs · 5 min readCisco Talos has analyzed a new Windows infostealer called VOLTA, which calls itself VOLTA-AUTODOXER. It steals the usual data, then hands the loot to a large language model that ranks what the victim is worth.…
Security Affairs · 5 min readOnline fashion retailer Revolve is notifying at least 200,000 individuals that their personal and payment card information was stolen in a data breach. The incident occurred on September 11 and involved…
SecurityWeek · 2 min readGoogle has expanded its Cloud Vulnerability Reward Program (VRP) with a new $250,000 top-tier reward for security weaknesses that could lead to full administrative control. The premier payout is “specifically…
SecurityWeek · 2 min readA new wave of fridge cyberattacks has affected supermarket refrigeration systems in several European countries. Fridges and freezers suddenly rose in temperature overnight, with some incidents suspected to be…
Security Affairs · 6 min readNo matches on this page. Change the filter or browse another page.
