No Client Isolation on a Private APN: CERT Polska's First Observed Case A compromised firewall at a Polish wind farm reached the control systems of a power plant that heats roughly 50,000 residents, because the private cellular network connecting the two sites had no clie... Critical Infrastructure Cyberattack Government Network Security Sep 3, 2026
Internet-Facing PLCs: The Exposure Sits on Networks You Don't Own Attackers changed IP addresses and passwords on water utility control systems, locking operators out. Utilities in at least seven US states reported incidents to the FBI from 27 July 2026, and CISA re... Aug 19, 2026
Lateral Movement: Why Zero Trust Segmentation Matters After OpenAI's Breach An OpenAI model hacked into another company's live systems on its own, no human directing it. The target's co-founder called it ‘a wake-up call.’ Key Facts On July 21, 2026, OpenAI disclosed that one... AI Cyberattack Aug 3, 2026
Why Palo Alto Firewalls Keep Getting Exploited In May 2026, Palo Alto Networks disclosed CVE-2026-0300, a critical flaw in its firewall software that state-sponsored attackers had been exploiting for four weeks prior to public disclosure. A second... Jun 12, 2026
SaaS Data Sovereignty: Lessons From the McGraw Hill Salesforce Breach In April 2026, attackers exfiltrated 13.5 million records from McGraw Hill through a misconfigured Salesforce-hosted webpage. According to The Register , the Salesforce platform itself was not comprom... Data Breach Data Synchronization & Storage May 20, 2026
Email Infrastructure Security: Protecting Military and Government Accounts After the Romanian Air Force Breach Military and government organisations often rely on email systems for sensitive communications. When those email infrastructures remain findable and reachable from the internet, state-linked actors ca... Espionage Government Network Security Apr 22, 2026
Wiper Attacks Without Malware: Inside the Stryker Breach On 11 March 2026, Iran-linked hackers from the group Handala wiped approximately 80,000 devices across Stryker's global Microsoft environment, disrupting manufacturing and shipping at one of the world... Apr 9, 2026
Chinese Cyberattacks Hit Taiwan Infrastructure 2.6 Million Times a Day in 2025 Taiwan’s National Security Bureau recorded an average of 2.63 million Chinese cyberattacks a day against key infrastructure in 2025, up 6% from 2024 and 113% from 2023. Reported targets included gover... Critical Infrastructure Mar 25, 2026
Reducing Third-Party Data Exposure: Lessons From the ManoMano Breach European DIY marketplace ManoMano disclosed a third-party breach affecting about 38 million individuals after attackers compromised a customer support provider linked to the company. Reported exposed ... Third-Party Risk Mar 12, 2026
Cisco SD-WAN Authentication Bypass CVE-2026-20127 On 25 February 2026, Cisco disclosed a critical authentication bypass vulnerability, CVE-2026-20127, affecting Cisco Catalyst SD-WAN Manager and Controller platforms. The flaw allows a remote, unauthe... Business Risk Cybersecurity Government Mar 5, 2026
Unprotected Cloud Storage Exposed VIP Passports at Abu Dhabi Finance Week In February 2026, a security researcher discovered that more than 700 passport and identity document scans from Abu Dhabi Finance Week 2025 were stored in a publicly accessible cloud environment. The ... Data Privacy Encryption Feb 26, 2026
Unencrypted Satellite Communications: How Global Traffic Was Exposed Academic research has shown that large volumes of satellite communications traffic are transmitted without encryption and can be intercepted using low-cost consumer equipment. Sensitive data including... Secure Communication Telecom Feb 19, 2026