DriveWealth Data Breach Exposes Historical Revolut Customer Records
A DriveWealth breach exposed historical personal data belonging to some Revolut customers. Revolut says its own systems, passwords, cards and funds were not compromised.
SaveCybersecurity
Kiteworks Restores Systems After Precautionary Cyber Shutdown
Kiteworks has lifted its precautionary shutdown advisory after remediating a critical vulnerability. Here is what happened and what customers should do next.
Save
Microsoft Warns Phishing Campaigns Abuse RMM Tools for Persistent Access
Microsoft says phishing campaigns abused legitimate remote monitoring and management software to establish persistent access and deploy a second remote-access channel.
Save
PixelLeak: AI Coding Agents Exposed 13,000 Screenshots on Public GitHub Repositories
Glow Security researchers say AI coding agents exposed more than 13,000 internal screenshots linked to 343 organisations in public GitHub repositories.
Save
OpenSSL Security Update Fixes Certificate and QUIC Vulnerabilities
OpenSSL has published fixes for multiple vulnerabilities, including CVE-2026-35189 memory exhaustion from crafted certificates and QUIC-related flaws.
Save
Cloudflare Plans Public Certificate Authority for Post-Quantum Web
Cloudflare plans to become a public certificate authority, has applied to major browser root programmes and is preparing Merkle Tree Certificates for post-quantum web PKI.
Save
Nvidia Launches Open Agent Safety Platform for Autonomous AI Agents
Nvidia has launched the Open Agent Safety Platform, combining the open-source OpenShell runtime with Sentry, an out-of-band monitoring design using BlueField-4 DPUs.
Save
Citrix Patches Two NetScaler Zero-Days Exploited in Attacks
Citrix has released urgent fixes for two critical NetScaler zero-days being exploited in the wild. Here are the affected versions, fixed builds and immediate steps administrators should take.
Save
ShinyHunters Bypasses PeopleSoft WAF Defences as CVE-2026-35273 Attacks Continue
ShinyHunters has renewed attacks on Oracle PeopleSoft CVE-2026-35273 using request variations that can bypass WAF mitigations. Here is what administrators need to know and why Oracle's patch matters.
Save
MemTensor npm and PyPI Packages Compromised by sckit Credential Stealer
Compromised MemTensor npm and PyPI packages distributed the sckit credential stealer, putting developer machines, CI environments and cloud credentials at risk.
Save
Red Hat OpenShift Flaw Can Bypass Release Image Signature Checks
A high-severity OpenShift oc-mirror flaw can bypass PGP release-image signature checks. Here is what CVE-2026-75939 means for disconnected registries.
Save
GitHub Enterprise Adds Credential Inventory Exports for Faster Security Response
GitHub Enterprise Cloud now offers credential inventory APIs and CSV exports covering SSH keys, personal access tokens and app credentials. Here is what security teams can see and how the feature can help incident response.
Save