Eduard Kovacs

Significant cybersecurity M&A deals announced by Airbus, Cellebrite, Databricks, Quantum eMotion, Rapid7, and OpenAI.

The company is investigating the full scope of the incident, including whether any files have been compromised.

Google has announced fixes for CVE-2026-5281, a zero-day affecting Chrome’s Dawn component. 

The agency has not named the problematic foreign-made applications, but TikTok and Temu come to mind.

Palo Alto Networks has disclosed the details of its analysis of Google Cloud Platform’s Vertex AI.

The latest funding round brings the total venture capital investment in Censys to $149 million.

Google researchers have shown that breaking the encryption of Bitcoin and Ethereum requires 20x fewer qubits. 

The company has disclosed a cybersecurity incident involving one of its electronic health record environments.

The ShinyHunters hacker group claimed to have stolen over 350GB of information from European Commission cloud systems.

The agency said Iranian hackers targeted the director’s personal email account and noted that the compromised information is old.

Police in Germany physically warned organizations about the critical PTC Windchill vulnerability tracked as CVE-2026-4681.

Hambardzum Minasyan of Armenia has been accused of being involved in the development and administration of the infostealer malware.

The computer giants have announced new security capabilities for PCs and printers.

Ilya Angelov was a member of the cybercrime group tracked as TA-551, Shathak, Gold Cabin, Monster Libra, and ATK236.

Aleksei Volkov has been sentenced to 81 months in prison for his role in Yanluowang ransomware attacks. 

The cybersecurity firm said the personal information of hundreds of employees was stolen in the hacker attack targeting Navia.

The FBI has published an alert describing the malware used by Iranian government hackers.

The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025.

CVE-2026-21992 can be used without authentication for remote code execution and it may have been exploited in the wild. 

The vulnerability is tracked as CVE-2025-32975 and it may have been exploited in attacks against the education sector.