Cybersecurity

Cyber Attack Disrupts Universities and Schools Across the United States

A large-scale cyber attack hit educational institutions across multiple US states, causing widespread disruption to university and school systems affecting hundreds of thousands of students and staff.

Canadian Election Databases Use 'Canary Traps' to Successfully Catch Data Leakers

Canadian election authorities implanted ‘canary traps’ — unique false data records — in voter databases, successfully tracking and identifying unauthorized internal access to sensitive voter data.

GPT-5.5 Matches Heavily Hyped Mythos Preview in Cybersecurity Tests

Latest tests from the US AI Safety Institute (AISI) show that OpenAI’s GPT-5.5 performs on par with the much-hyped Mythos Preview in cybersecurity capability tests, suggesting AI cyber threats are not ‘a breakthrough specific to one model.’

🔒 Pentagon: Anthropic Still Blacklisted, but Mythos Is a 'Separate National Security Issue'

DoD CTO Emil Michael says Anthropic remains a supply chain risk, but its advanced cyber-capable Mythos model is a separate national security issue, as the Pentagon announces agreements with seven AI companies for classified network deployment.

Ubuntu Websites and Services Offline Following Sustained DDoS Attack

Ubuntu’s official website and multiple services have been offline for over a day due to a sustained DDoS attack, with Canonical describing it as a ‘sustained, cross-border attack.’

Critical cPanel Authentication Bypass (CVE-2026-41940) Actively Exploited — Millions of Websites at Risk

A critical authentication bypass vulnerability (CVE-2026-41940) has been discovered in cPanel and WHM, with hackers actively exploiting it to take over servers, putting millions of websites worldwide at risk.

Critical cPanel Authentication Bug Actively Exploited, Millions of Websites at Risk

A critical authentication bypass vulnerability (CVE-2026-41940) in cPanel and WHM is being actively exploited in the wild, putting millions of websites at risk of server takeover.

Sri Lanka Discloses Another Missing Payment Days After $2.5M Finance Ministry Hack

Sri Lanka’s government discloses another anomalous financial transaction, days after hackers stole $2.5M from the finance ministry, as the nation’s cybersecurity vulnerabilities continue to come under scrutiny.

UK Cyber Chiefs Urge Public to Ditch Passwords in Favour of Passkeys

The UK’s National Cyber Security Centre (NCSC) has officially recommended users adopt passkeys over traditional passwords as the most secure way to protect online accounts.

Wiz Researchers Discover Critical GitHub RCE Vulnerability: Single git Push Command Compromises Backend Servers

Wiz Research uncovered CVE-2026-3854, a critical remote code execution flaw in GitHub’s internal git infrastructure allowing any authenticated user to execute arbitrary commands on backend servers via a single git push.