Cybersecurity news, data breaches, threats, privacy updates and developments in digital security.
Microsoft has released its largest Patch Tuesday security update on record, addressing 964 customer-relevant vulnerabilities across Windows, Office, Azure, Exchange and other products. The update also fixes two Windows zero-days that attackers were already exploiting to gain SYSTEM-level privileges.
Security researchers uncovered a cross-account communication channel in ChatGPT that could secretly execute attacker-controlled tasks using a victim’s session. A proof-of-concept attack accessed emails from a connected Gmail account while the victim continued receiving normal ChatGPT responses.
More than 220 million passenger and crew records were exposed through a Vietnam-linked Advance Passenger Information System database. The data included passport numbers, dates of birth and detailed flight information covering travel records from 2017 to 2026.
N-able has released an emergency hotfix for CVE-2026-86218, a critical vulnerability in its N-central remote monitoring platform that can enable remote code execution without authentication. The company has urged on-premises customers to install the update immediately.
A newly discovered StyleSmuggler zero-day is being actively exploited against Magento and Adobe Commerce stores, giving attackers unauthenticated remote code execution while an official Adobe fix is still pending.
CrowdStrike has launched a dedicated Cyber Superintelligence Lab focused on using frontier AI to strengthen cyberdefense, develop safer AI systems and respond faster to increasingly automated cyber threats.
The G7 is urging governments and businesses to begin moving to post-quantum cryptography now, warning that waiting for powerful quantum computers could leave sensitive data exposed.
Google has patched a high-severity Chrome zero-day in V8 that attackers are already exploiting in the wild.
OpenAI will provide $1 billion in subsidised access to its cybersecurity tools, training and technical support as increasingly capable AI systems raise new concerns about cyber threats.
Thomson Reuters has disclosed a cybersecurity incident involving its C-Track case management platform, with certain court files accessed by an unauthorized party across parts of the US and Canada.
CrowdStrike reports $1.47 billion in second-quarter revenue, record net new ARR and stronger Falcon Flex adoption as enterprise cybersecurity demand continues to grow.
Abnormal AI is expanding its email security platform with new controls for inbound threats, outbound data protection and adaptive phishing training.
