The Archive
The Archive
Hacking
Fortinet path traversal CVE-2025-61624 joins CISA KEV
CISA listed Fortinet's admin path traversal after Unit 42 showed attackers used it to plant the PEERSTITCH firewall implant.
Hacking
Microsoft patches Exchange flaw that reads other mail
An out-of-band Exchange Server update fixes CVE-2026-96940, which lets a logged-in attacker read other users' mailboxes.
Hacking
Big Echo karaoke data at risk after contractor hit
Daiichi Kosho says personal details on about 8.72 million Big Echo customers and staff may have leaked after malware hit a contractor PC.
Hacking
Cisco SD-WAN Manager auth bypass under attack
Cisco and CISA warn that CVE-2026-76504, an authentication bypass in Catalyst SD-WAN Manager, is being exploited in the wild.
Hacking
Cisco ESA AMP flaw CVE-2026-76519 under attack
Cisco says CVE-2026-76519, a new Secure Email Gateway flaw in its malware scanning feature, is under attack. CISA set a 17 October deadline.
How-to
How to check an investment offer before you pay
Australians reported losing more than $837 million to investment scams in 2025. How to check a licence on ASIC's register in about ten minutes.
How-to
How to charge an EV at a public charger in Australia
Ampol has agreed to buy Evie Networks for $225 million. How to start and stop a charge at Evie, Chargefox and Tesla chargers, and avoid idle fees.
Hacking
CenterPoint breach hits over 1 million Texans
Houston TV reports on a Texas AG filing say CenterPoint Energy's September breach exposed personal data on more than a million customers.
Hacking
Burger King Japan app leak hits 11.18 million
BK Japan's operator says about 11.18 million official-app membership records leaked after attackers got into the membership system.
Hacking
Atlassian file-read bug CVE-2026-21589 is under attack
CISA added Atlassian's CVE-2026-21589 to its KEV list after honeypots saw exploitation attempts within two hours of a public write-up.
Hacking
ASOS says employee login theft led to HACKED alerts
ASOS says a stolen employee login let attackers send "ASOS HACKED" app alerts on 6 October. Names and contact details were accessed, cards were not.