Government & Defence — Cybersecurity News & Threat Intelligence | CyberSecureToday

Saturday, 31 October 2026Latest threats →Get the daily brief →

CyberSecureTodayNewsThreatsInsightsCyberSecureToday

114 articlesUpdated 23 Oct 2026

NewsCloud & SaaS

Meta Ordered to Pay $25 Billion After New Mexico Court Finds Consumer Privacy Deceptions

A New Mexico state court orders Meta to pay $25 billion for 43 million deceptive trade violations stemming from the Cambridge Analytica data-harvesting scandal.

23 Oct 202610 min read

Daniel Okafor

ResearchBanking & Fintech
Singapore CSA Mandates Quantum-Safe Cryptographic Migration Roadmap for Critical Information Infrastructure
Singapore's Cyber Security Agency releases the National Quantum-Safe Migration Roadmap at SICW, setting strict 2031-2035 deadlines for Critical Infrastructure operators.
Priya Raman21 Oct 202614 min read
Cyber AttackCloud & SaaS
Operation Cyber Guardian: CSA and IMDA Expose UNC3886 Stealth Espionage Campaign Targeting Singapore Telcos
Singapore's CSA and IMDA disclose Operation Cyber Guardian, evicting APT group UNC3886 after a coordinated cyber-espionage infiltration targeting national telco backbones.
Daniel Okafor21 Oct 202614 min read
ThreatsCloud & SaaSCritical
Microsoft SharePoint Cryptographic Signature Verification Flaw CVE-2026-102866 Enables Token Forgery and Account Takeover
Microsoft patches a critical cryptographic signature verification flaw in SharePoint Server (CVE-2026-102866) that permits token tampering and full administrative impersonation.
CST Editorial Desk17 Oct 20269 min read
ThreatsCloud & SaaSCritical
Autonomous AI Agents Infiltrate Live Production Systems in Escalating Exploitation Wave Across Indian Enterprises
CERT-In advisory CIAD-2026-0049 reveals autonomous AI agents infiltrated live systems, reading confidential data as threat actors weaponize agentic tooling.
Priya Raman16 Oct 202610 min read
InsightsBanking & Fintech
RBI Cyber Security Framework Mandates 6-Hour Breach Reporting and Cloud Audits
The Reserve Bank of India enforces updated CSFB directives mandating 6-hour breach disclosure to CERT-In, third-party cloud audits, and zero-trust banking security.
Priya Raman15 Oct 20269 min read
ThreatsCloud & SaaSCritical
Ivanti Endpoint Manager SQL Injection Enables Unauthenticated Code Execution
Ivanti patches critical SQL injection vulnerability CVE-2026-89310 in Endpoint Manager Core Server enabling unauthenticated remote code execution.
CST Editorial Desk14 Oct 20268 min read
InsightsBanking & Fintech
SEC Form 8-K Item 1.05 Material Incident Rules: Ransomware Exfiltration Forensics & Board Disclosure Mandate
Forensic analysis of SEC Form 8-K Item 1.05 material cybersecurity incident disclosures: 4-day reporting timelines, root causes, and board oversight standards.
CST Editorial Desk14 Oct 20269 min read
ThreatsCloud & SaaSCritical
ProFTPD mod_copy Flaw Weaponized to Copy Server Files and Execute Code
ProFTPD resolves a critical access control flaw in mod_copy (CVE-2015-3306) where unauthenticated attackers copy arbitrary server files and execute remote code.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSHigh
Fortinet FortiOS and FortiProxy Flaw Leaks Administrator Bearer Tokens
Fortinet releases security updates for FortiOS and FortiProxy (CVE-2026-14851) resolving an information disclosure flaw that exposed administrative bearer tokens.
Mei-Lin Chen14 Oct 20268 min read
ThreatsCloud & SaaSCritical
ONLYOFFICE Document Server Path Traversal Flaw Enables Remote Code Execution
ONLYOFFICE patches a critical path traversal vulnerability in Document Server DocService (CVE-2021-3199) allowing arbitrary file overwrite and remote code execution.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSCritical
Windows Remote Management (WinRM) Command Injection Flaw CVE-2026-96951 Enables System Hijack
Microsoft addresses a critical Windows Remote Management command injection vulnerability (CVE-2026-96951) allowing remote code execution via WSMAN SOAP requests.
CST Editorial Desk14 Oct 20268 min read
ThreatsCloud & SaaSCritical
Ivanti Connect Secure SAML Bypass Opens Gateways to Pre-Auth Code Execution
Ivanti discloses critical vulnerability CVE-2026-104935 in Connect Secure and Policy Secure gateways allowing pre-auth SAML remote code execution.
Mei-Lin Chen14 Oct 20269 min read
ThreatsCloud & SaaSCritical
ISC BIND 9 TKEY Flaw Exploited to Crash Authoritative DNS Servers
ISC resolves a critical assertion failure defect in BIND 9 nameservers (CVE-2015-5477) where a single malformed TKEY query crashes DNS daemons remotely.
CST Editorial Desk13 Oct 20268 min read
ThreatsCloud & SaaSHigh
Azure Arc Connected Machine Agent Local Privilege Escalation Flaw CVE-2026-83711 Enables Host Compromise
Microsoft addresses a critical privilege escalation flaw in Azure Arc Connected Machine Agent (CVE-2026-83711) exposing Hybrid Instance Metadata Service tokens.
Aisha Noor13 Oct 20268 min read
ThreatsCloud & SaaSCritical
Apache Struts 2 Dynamic Method Invocation Flaw Weaponized for Remote Code Execution
Apache Struts resolves critical vulnerability S2-032 (CVE-2016-3081) where dynamic method invocation enables arbitrary remote command execution via OGNL payloads.
CST Editorial Desk13 Oct 20269 min read
Cyber AttackGov & Defence
Small Modular Reactor Developer Discloses Infiltration of Reactor Engineering Portal
A publicly traded small modular reactor developer files SEC Form 8-K Item 1.05 following nation-state infiltration of reactor design and core physics software vaults.
CST Editorial Desk13 Oct 20268 min read
Cyber AttackGov & Defence
Defense Aerospace Contractor Discloses Nation-State Intrusion in Satellite Ground Station Software
A premier defense aerospace corporation files SEC Form 8-K Item 1.05 after nation-state actors infiltrate satellite ground station command software.
Priya Raman13 Oct 20268 min read
Cyber AttackCloud & SaaS
Global Telecom Discloses Nation-State Infiltration of Subsea Cable Management Systems
A global telecommunications consortium files SEC Form 8-K Item 1.05 after nation-state threat actors infiltrate subsea fiber cable network management platforms.
Priya Raman12 Oct 20268 min read
NewsIndustrial & OTCritical
Mitsubishi Electric MELSEC iQ-F PLC Flaw Enables Memory Overwrite and Axis Stoppage
Mitsubishi Electric and CISA disclose advisory for MELSEC iQ-F compact PLCs, patching a critical Modbus RTU communication buffer overflow (CVE-2026-75890).
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Delta Electronics CNC HMI Flaw Allows Remote Unauthenticated G-Code Toolpath Manipulation and Spindle Override (CVE-2026-74810)
Delta Electronics and CISA issue advisory for CNC HMI controllers, patching a critical memory corruption flaw (CVE-2026-74810) allowing remote toolpath tampering.
CST Editorial Desk12 Oct 20268 min read
NewsIndustrial & OTCritical
Yokogawa CENTUM VP Flaw Lets Malformed Vnet/IP Packets Force Controller Restarts
Yokogawa releases security advisory YSAR-26-0004 for CENTUM VP Field Control Stations, patching a critical Vnet/IP communication flaw (CVE-2026-72840).
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
Rockwell ControlLogix 5580 CIP Flaw Allows Unauthenticated Denial of Service
Rockwell Automation and CISA release advisory for ControlLogix 5580 controllers, patching a critical CIP protocol memory stride overflow (CVE-2026-70820).
CST Editorial Desk11 Oct 20268 min read
NewsIndustrial & OTCritical
Emerson Ovation DCS Flaw Enables Logic Injection in Power Generation Networks
Emerson discloses critical vulnerability CVE-2026-69880 in Ovation Distributed Control System OCR400 controllers allowing remote code execution and turbine control logic tampering.
CST Editorial Desk11 Oct 20268 min read

Threat scope

Nation-state APTs, military contractors, public infrastructure, cyber warfare and national CERTs.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

Exploited CVEs, with affected products and patch status
Patch priorities ranked by real-world exploitation
Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issue Privacy policy