PNLD Breach Exposes U.K. Police and Government Contact Details on Dark Web

The Police National Legal Database PNLD has confirmed that police, government and customer contact information was compromised and published on the dark web. The data included names, organisations and work email addresses belonging to police officers, police staff, criminal justice professionals,...

API Security for Government Services: Protecting Citizen-Facing Applications

...

OctLurk and SilkLurk: newly identified tailored backdoors in cyber-espionage campaign in Central Asia

Introduction We have been tracking two new backdoors, OctLurk and SilkLurk , observed in attacks against government organizations primarily in Central Asia since January 2025. Identified victims are located in Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and the Syrian Arab...

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Russian threat actors recently linked to the exploitation of a now-patched vulnerability in Zimbra have been observed exploiting another vulnerability, this time in Microsoft Outlook Web Access OWA, to target U.S. and European government entities, as well as the telecommunications, financial,...

FakeIDet3-DB: Refining Digital Attacks and Patch Extraction for Secure ID Benchmarking

Identity document ID authentication relies on the structural integrity of complex, high-frequency security patterns. However, advanced Generative AI models can now inject localized, high-fidelity manipulations, creating deceptive attacks that bypass standard verification. Training robust image...

PhantomEnigma Infects Organizations with Malware via Hijacked Government Websites

PhantomEnigma abuses Brazilian government websites and trusted email channels to spread malware, target banks, evade security checks, and maintain access...

CVE-2025-21846

creationtimestamp| type| source ---|---|--- 2026-07-28 16:17:32+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-209-04...

CGA-4349-9RFV-XWW6

Bulletin has no description...

CGA-6X4F-QF4G-43RJ

Bulletin has no description...

CGA-3M3V-RX7P-8WCV

Bulletin has no description...

CGA-8525-3R22-6943

Bulletin has no description...

CVE-2026-15966

creationtimestamp| type| source ---|---|--- 2026-07-24 16:45:08+00:00| seen| https://www.acn.gov.it/portale/w/progress-software-aggiornamenti-di-sicurezza-6 2026-07-31 12:40:20+00:00| seen| https://bsky.app/profile/o2cloud.bsky.social/post/3mrwxywh52x23...

CVE-2026-62495

creationtimestamp| type| source ---|---|--- 2026-07-23 18:20:18+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61125

creationtimestamp| type| source ---|---|--- 2026-07-23 18:15:08+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61091

creationtimestamp| type| source ---|---|--- 2026-07-23 17:52:15+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-61063

creationtimestamp| type| source ---|---|--- 2026-07-23 17:51:37+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60988

creationtimestamp| type| source ---|---|--- 2026-07-23 17:50:25+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60986

creationtimestamp| type| source ---|---|--- 2026-07-23 17:50:20+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60972

creationtimestamp| type| source ---|---|--- 2026-07-23 17:50:04+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9...

CVE-2026-60965

creationtimestamp| type| source ---|---|--- 2026-07-23 17:49:59+00:00| seen| https://www.acn.gov.it/portale/w/critical-patch-update-di-oracle-9 2026-07-27 16:37:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mrndemopse2v...