Latest security news

Fri, 11 Sept 2026

1. 12:15
   Ukrainian lawyer's second career as a Conti coder earns him 4 years behind bars

   Swapping legal work for malware development ended in extradition and a guilty plea

   The Register
2. 12:14
   Android malware creates a hidden copy of your banking app

   The Gigabud banking Trojan can clone a banking app into a separate work profile on an Android device to help hide fraudulent transactions.

   Malwarebytes Labs·Android
3. 12:00
   Accountability, oversight and AI: Inside Microsoft’s security transformation

   Stung by years of embarrassing hacks, the tech giant overhauled how it approached cybersecurity. Company leaders now say they’re seeing results.

   Cybersecurity Dive·Microsoft
4. 12:00
   Ukrainian hacker gets four years in US prison over Conti ransomware attacks

   A Ukrainian national was sentenced to four years in a U.S. prison for his role in the notorious Conti ransomware operation, which targeted more than 1,000 victims worldwide before shutting down in 2022.

   The Record
5. 11:34
   EU's Cyber Resilience Act starts the 24-hour vulnerability clock

   Manufacturers must now disclose actively exploited flaws and severe security incidents through ENISA's new reporting platform

   The Register
6. 11:30
   Your Critical Vulnerabilities Might Not Be Your Biggest Risk

   Security teams have become exceptionally talented at finding vulnerabilities. Now, it’s time to turn our attention to optimizing the process for determining which of those vulnerabilities actually create a path to compromise. A critical vulnerability may look alarming on a scanner report, but if it sits behind strong segmentation, identity controls, and other defenses that prevent an attacker

   The Hacker News
7. 11:29
   Ukrainian Conti Ransomware Developer Sentenced to 4 Years in US Prison

   Oleksii Oleksiyovych Lytvynenko has been sentenced to 4 years in prison after he was arrested in Ireland in 2023.

   SecurityWeek
8. 11:15
   GitLab urges users to patch max severity path traversal flaw

   GitLab urged users on Thursday to patch their servers immediately against a maximum-severity path traversal vulnerability tracked as CVE-2026-85706.

   BleepingComputer·GitLab
9. 11:10
   Check Point Patches Critical VPN Vulnerabilities

   Tracked as CVE-2026-85102 and CVE-2026-85103, the flaws could be exploited for remote code execution.

   SecurityWeek
10. 10:56
    Kiteworks Acquires Bonfy.AI to Fill the AI Gap in Data Governance

    Financials have not been disclosed, but the estimated cost is in the tens of millions of dollars.

    SecurityWeek