The CyberSignal delivers breaking cybersecurity news, data breach reports, vulnerability alerts, and threat intelligence for CISOs, IT leaders, and security professionals.
Vulnerability Management
The National Institute of Standards and Technology pivots to a prioritization model, focusing enrichment efforts on critical software and known exploited vulnerabilities as the backlog reaches historic levels. GAITHERSBURG, MD — The National Institute of Standards and Technology (NIST) has announced a fundamental shift in how it manages the National Vulnerability
Trending
A high-severity vulnerability in Splunk’s data processing engine could allow authenticated attackers to execute arbitrary code, threatening the integrity of enterprise monitoring environments. SAN FRANCISCO, CA — Splunk has released urgent security updates for its Enterprise and Cloud Platform products to address a high-severity Remote Code Execution (RCE) vulnerability. The
Identity Theft
A global surge in fraudulent Apple alerts is weaponizing the fear of losing personal photos to steal credit card details and Apple ID credentials. CUPERTINO, CA — Apple users worldwide are being urged to exercise extreme caution as a pervasive and highly effective phishing campaign resurfaces. The scam, which utilizes "
Vulnerabilities
Security updates address four severe vulnerabilities that could allow unauthenticated attackers to execute remote code or impersonate high-level administrators within corporate environments. SAN JOSE, CA — Cisco Systems has released critical security patches to address a quartet of high-impact vulnerabilities affecting its Identity Services Engine (ISE) and Webex collaboration suite. The
Data Breaches
The developer of wireless cardiac pacing technology confirms unauthorized access to limited network data, joining a growing list of Australian healthcare targets in 2026. BRISBANE, AU — EBR Systems (ASX: EBR), a prominent medical technology firm specializing in wireless cardiac pacing, has officially reported a "contained" cybersecurity incident affecting
Data Breaches
Cookeville Regional Medical Center (CRMC) confirms a month-long unauthorized access incident that exposed sensitive medical records, Social Security numbers, and financial data. COOKEVILLE, TN — Cookeville Regional Medical Center (CRMC) has begun notifying 337,917 individuals that their highly sensitive personal and medical information was compromised during a sophisticated cyberattack. The
Data Breaches
The education publishing giant is the latest victim of a widespread cloud configuration issue, with reports suggesting up to 13.5 million accounts may be impacted by an extortion-linked breach. NEW YORK, NY — McGraw Hill, one of the world’s "Big Three" educational publishers, has confirmed a significant
Identity Theft
A highly sophisticated phishing operation is utilizing hyper-personalized "copyright strike" warnings to bypass security instincts and seize full control of Google accounts and YouTube channels. MOUNTAIN VIEW, CA — A new and alarmingly convincing phishing campaign is currently targeting YouTube creators, leveraging their greatest fear: the sudden loss of
Following a massive Patch Tuesday release addressing 169 vulnerabilities, federal authorities have added two high-risk Microsoft flaws to the Known Exploited Vulnerabilities (KEV) catalog — including a legacy bug from 2009. WASHINGTON, D.C. — The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) catalog, adding a
Vulnerabilities
A severe vulnerability in the popular Nginx UI management tool is being actively exploited, allowing attackers to bypass authentication and gain full command execution on hosting infrastructure. SAN FRANCISCO, CA — Security researchers have issued an urgent warning following the discovery of CVE-2026-33032, a critical vulnerability in Nginx UI — a widely
Microsoft Ecosystem
The inaugural live hacking event at Microsoft’s Redmond campus resulted in the discovery of nearly 700 vulnerabilities, including over 80 high-impact flaws in Cloud and AI infrastructure. REDMOND, WA — Microsoft has officially concluded its "Zero Day Quest" 2026, awarding a total of $2.3 million to security
Cyber Attacks
The automotive data giant has taken several core systems offline following a targeted ransomware strike, disrupting valuation and pricing services for thousands of dealerships and insurers across Europe. PETERBOROUGH, UK — Autovista Group, a critical provider of data, analytics, and industry insights for the European automotive sector, has confirmed it is