Threat advisories, regulatory changes in the Kingdom, short briefs on what matters this week, and news from our firm — each written for decision makers, with what to do next.
Researchers describe a large-scale campaign against exposed edge devices, including Fortinet FortiGate and Palo Alto Networks GlobalProtect. Operators reportedly gained access to many organizations worldwide and tried t…
TeamUpdraft reported unauthorised access to its website on 17-18 October. Attackers are reportedly using stolen UpdraftCentral keys to install backdoor plugins and create administrator accounts on connected WordPress si…
The UK NCSC advisory says Russian group APT28 exploited vulnerable routers for DNS hijacking, intercepting traffic and harvesting passwords and access tokens. It urges securing management interfaces, patching and two-st…
On 19 October an attacker used a hijacked contributor account to swap the archives of five OVHcloud CLI releases on GitHub for a build that steals secrets from disk. The files were live for up to 94 minutes.
A new Android malware replaces legitimate banking apps with modified versions that disable signature checks, accessibility detection and integrity verification to steal credentials and enable remote control.
A threat actor used ARTEX AI and Claude agents to breach multiple South Korean banks, exposing customer data and causing outages, prompting the developer to close-source the tool.
SAP has patched CVE-2026-89111, a maximum-severity OAuth2 SSRF vulnerability in its Cloud SDK for Python that allows remote attackers to steal credentials from multi-tenant BTP applications.
Recent ransomware incidents highlight how attackers exploit authentication gaps where MFA protects cloud applications but VPN, RDP and Windows logon remain password-only.
Tell us where you stand. We will show you the shortest path to what your regulator expects.
SAMA, NCA and SDAIA changes and what they mean for your institution — once a month.
↑↓ to move↵ to openEsc to close
