Government & Defence — Cybersecurity News & Threat Intelligence — Page 4

85 articlesUpdated 6 Oct 2026Page 4 of 4

GuidesGov & Defence
CERT-In's six-hour clock meets DPDP: one intake process, two notification deadlines
India's six-hour CERT-In reporting clock has run since June 2022. From May 2027 a second DPDP clock starts on the same incident. Build one intake process now.
Tom Verhoeven11 Sep 20266 min read
NewsGov & Defence
A CVSS 10.0 ERP Flaw Your Scanner Will Never Report: The CERT-In Blind Spot
CERT-In scored an unauthenticated RCE in Manacle ERP at CVSS 10.0. The CVE is in NVD, but with no CPE data your scanner cannot match it. Here is how to fix that.
CST Newsroom11 Sep 20266 min read
ThreatsCloud & SaaSCritical
FortiClient EMS CVE-2026-35616: the hotfix window was not the dangerous part
Fortinet's emergency hotfix for CVE-2026-35616 blocked the attack path without fixing the flaw, and the complete patch that followed needed its own re-release.
Priya Raman10 Sep 20266 min read
ThreatsGov & DefenceCritical
Surge in Enterprise Exploits: 12 Critical Zero-Days Weaponized in a Single Week Across Citrix, Cisco and Fortinet
Twelve fresh entries hit the Known Exploited Vulnerabilities catalog, covering Citrix NetScaler, Cisco FMC, Fortinet FortiOS, Adobe Commerce, N-able N-central and Chrome.
Daniel Okafor10 Sep 20266 min read
ThreatsGov & DefenceHigh
APT28 Ran Its C2 Through Filen Cloud Storage. Reputation Filtering Never Stood a Chance
Trellix says APT28 routed command-and-control through filen.io during a three-day European phishing burst. Here is the behavioural detection logic that catches it when reputation cannot.
Mei-Lin Chen10 Sep 20266 min read
InsightsEnergy & Utilities
The EU AI Act's High-Risk Rules Slipped to December 2027. Your Logging Problem Did Not Move
Regulation (EU) 2026/1744 pushed Annex III high-risk obligations to December 2027, but Article 12 logging, Article 14 oversight and Article 15 hardening are engineering work you cannot start late.
Tom Verhoeven9 Sep 20266 min read
ResearchCloud & SaaS
BlueMoon Exploit Kit: Chrome V8 Zero-Day Chained with Windows Kernel Escalation
Proofpoint disclosed the BlueMoon exploit kit weaponizing Google Chrome V8 flaws (CVE-2026-87491) alongside Windows kernel privilege escalation in state-aligned espionage attacks.
Mei-Lin Chen9 Sep 20266 min read
ThreatsCloud & SaaSCritical
N-able N-central Pre-Auth RCE Flaw Under Active Exploitation (CVE-2026-86218)
CISA issued an emergency KEV addition for CVE-2026-86218, an unauthenticated static code injection flaw in N-able N-central RMM servers actively exploited against MSP networks.
Daniel Okafor8 Sep 20265 min read
Cyber AttackGov & Defence
Gunra ransomware: what AA26-222A actually gives your detection engineers
Six agencies detailed Gunra's Fortinet entry, its forticloud-sync backdoor and an MFA bypass planted in a VDI server. Here is how to turn that into detection coverage.
Daniel Okafor8 Sep 20266 min read
ThreatsCloud & SaaSCritical
FreeIPA LDAP ACI Vulnerability Chain Grants Anonymous Clients Domain Admin Rights
Red Hat patched CVE-2026-76578 (CVSS 9.8) in FreeIPA and 389 Directory Server, where an LDAP Access Control Instruction flaw allowed unauthenticated clients to create permanent domain admins.
Tom Verhoeven8 Sep 20265 min read
InsightsEnergy & Utilities
NIS2 simplification and CSA2: what the January 2026 cybersecurity package actually changes
The European Commission’s cybersecurity package proposes amendments to NIS2 and a revised Cybersecurity Act. Here is what compliance teams need to track.
Tom Verhoeven8 Sep 20267 min read
ResearchTelecom & Media
Salt Typhoon has compromised networks in more than 80 countries, researchers say
The Chinese state-aligned group has moved well beyond telecoms into transportation and government, in what is now one of the broadest espionage campaigns on record.
Daniel Okafor7 Sep 20268 min read
Cyber AttackGov & Defence
Rhysida ransomware hits Berlin Senate network as public sector attacks accelerate
The Rhysida group claimed an attack on Berlin’s Senate network, part of a run of incidents that also struck a national tax authority and a justice ministry within two weeks.
Daniel Okafor1 Sep 20265 min read