The CyberSignal (Page 28)

Latest

Editorial illustration of an open national risk register with a hazard-warning triangle rising from the page, marking the UK's catastrophic cyber-attack warnings.

Policy & Government

UK Government Updates National Risk Register with Catastrophic Cyber-Attack Warnings

The UK Government adds catastrophic cyber warnings to its National Risk Register — UK-operating defenders align posture this week.

Editorial illustration of a patched industrial control panel beside a calendar, marking ICS Patch Tuesday advisories from Siemens, Schneider and Rockwell.

Vulnerabilities

ICS Patch Tuesday: Siemens, Schneider Electric, and Rockwell Publish Dozens of Vulnerability Advisories

A big ICS Patch Tuesday cycle — defender teams for industrial operators concentrate patch verification this week as Siemens, Schneider Electric, and Rockwell Automation publish dozens of advisories.

Editorial illustration of two patched browser windows beside a blueprint scroll, marking Chrome 150 and Firefox 152 critical fixes and a public Firefox PoC.

Vulnerabilities

Google Chrome 150 and Mozilla Firefox 152 Ship Critical Patches; Public PoC Exists for Firefox Flaws

A same-week Chrome and Firefox critical patch cycle lands with public exploit code reportedly circulating for the Firefox flaws — making browser-fleet verification the defender task of the week.

Editorial illustration of a gateway appliance with a severity dial pinned to maximum, marking SonicWall SMA 1000 zero-days CVE-2026-15409 and CVE-2026-15410.

Vulnerabilities

SonicWall SMA 1000 Zero-Days Detailed: CVE-2026-15409 (CVSS 10.0 SSRF) and CVE-2026-15410 (Admin Command Execution)

SonicWall's SMA 1000 zero-days now have CVE-level detail — defender teams accelerate patch verification this week.

Editorial illustration of a file-share cloud with a closed door and a fresh patch over a sealed crack, marking Progress's confirmed ShareFile zero-day fix.

Vulnerabilities

Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption and Ships Fix

Progress closes the ShareFile emergency with a confirmed zero-day and shipped fix — Storage Zones Controller customers apply and restore this week.

Editorial illustration of report papers funneling into an eagle-marked tray, representing the White House Gold Eagle AI cyber threat clearinghouse.

Policy & Government

White House Details ‘Gold Eagle’ Clearinghouse for AI Cyber Threats

A White House policy signal on AI cyber threats — federal-adjacent organizations align this week.

Editorial illustration of a map pin formed from a signal wave over a military dog-tag, marking reported Iranian mobile-network tracking of US forces.

Nation-State Cyber Threats

Iran Abused Mobile-Network Vulnerabilities to Locate US Military Personnel, TechCrunch Reports

A nation-state mobile-network-vulnerability disclosure with defense-sector implications — coverage this week.

Editorial illustration of many package boxes merging into a wave bending a server, representing 148 malicious npm packages building a browser DDoS botnet.

Supply Chain Attack

148 npm Packages Disguised as Student Proxies Reportedly Turned Browsers Into a DDoS Botnet

A large-scale JavaScript-ecosystem supply-chain compromise — defender inventory work this week.

Editorial illustration of a code editor's play button pressing itself, wired to a repository crate, representing Cursor IDE auto-executing poisoned repos.

Artificial Intelligence (AI)

Cursor IDE Auto-Executes Malicious Code in Poisoned Repositories, Researchers Say

An AI-IDE supply-chain finding — defender review for organizations using Cursor this week.

Editorial illustration of a browser extension reaching an arm toward an envelope and calendar, marking a Claude for Chrome flaw exposing Gmail and Calendar.

Artificial Intelligence (AI)

Researchers Disclose Unpatched Claude for Chrome Flaw Tied to Gmail, Calendar Reads

An AI-browser extension disclosure with cross-tenant data implications — defender review for Claude for Chrome deployments this week.

Editorial illustration of three trails converging on a customer-records file, representing Microsoft's analysis of three Salesforce attack paths.

Threat Intelligence

Microsoft Maps Three Salesforce Attack Paths Tied to a Year of ShinyHunters Activity

Microsoft maps ShinyHunters' Salesforce activity — defender review for SaaS-heavy organizations this week.

Editorial illustration of a telephone spraying call bubbles, one wearing a mask, marking UK charges over the Russian Coms fraud platform and scam calls.

Cybercrime

UK Charges Five Over “Russian Coms” Fraud Platform Behind More Than a Million Scam Calls

A UK fraud-platform prosecution at scale — law-enforcement coverage this week.

See all