Node-RED CVSS 10 flaw exploited in attempts to plant Linux bots
Attackers are exploiting CVE-2026-58115 in unauthenticated Node-RED to drop Linux bots and webshells. What UK…
Month: November 2026
NCSC annual review: compliance alone won’t make UK firms resilient
NCSC's 2026 annual review warns AI will expose years of technical debt and tells boards…
Check Point says revenue hit bottom as firewall refresh slump bites
Check Point Q3 revenue fell 1% to $670m as firewall refreshes slowed. What its 12-20%…
OpenAI quadruples bug bounty rewards, top payout now $172,000
OpenAI reportedly more than quadruples bug bounty reward ranges and lifts its top payout to…
London’s Trigger.dev says attacker stole customer secrets and API keys
London AI workflow platform Trigger.dev says an attacker accessed customers' environment variables. Rotate every stored…
400+ disguised AI apps and sites hid deepfake tools; Apple pulls 19
Pet portrait and fitness apps used server-side cloaking to slip deepfake nudify tools past app…
Name.com hijack sends 15 domains to wallet drainer: DNS lessons
Attackers redirected 15 Name.com domains to a crypto wallet drainer. Why registrar accounts belong in…
VOLTA infostealer asks Claude, Kimi and Gemini to rank its victims
Cisco Talos details VOLTA-AUTODOXER, a Windows stealer that sends stolen sessions to AI models to…
Lenovo ‘AES-256’ USB stick was a plain SD card; rivals got no warning
Lenovo's 'encrypted' ThinkPlus FU100 stick held an unencrypted SD card. The fix, and a researcher's…
Aon: only 13% of UK firms have quantified their cyber exposure
Aon finds a quarter of UK firms have a cyber plan but only 13.1% have…