Microsoft Office vulnerability (CVE-2026-21509) in active exploitation
Categories: Threat Research
Tags: Microsoft Office, vulnerability, advisory
Similar Posts
Loan applications, drivers licences, personal data of 440k Aussies exposed after hacker hits Sydney finance tech company youX
Bys sEmma Kirk reports: A hacker has exposed personal data belonging to hundreds of thousands of Australians it allegedly stole from a Sydney finance technology company. Finance platform youX confirmed its systems were accessed by an unauthorised third party during a cyber security incident last week. […] A hacker has claimed to have stolen the personal……
UK businesses fear stigma of ransomware
Bys sAlex Scroxton reports: Fear of stigmatisation is likely leading businesses across the UK to drastically underreport data on ransomware attacks, especially when they have paid a ransom to a cyber criminal gang, as admission of such is often seen as supporting further criminal activity or defying compliance regulations. Data gleaned from the national Report Fraud service – which……
INTERPOL Operation Takes Down Sniper Dz Phishing Platform, Arrests Administrator
Bys sAn INTERPOL-led operation last month resulted in the disruption of Sniper Dz, a decade-long phishing-as-a-service (PhaaS) platform, Group-IB said Thursday. The effort, codenamed Operation Ramz, took place between October 2025 and February 2026, and saw authorities from 13 countries in the Middle East and North Africa (MENA) region making 201 arrests. Included among them was…
Apple Patches Safari Vulnerability Also Exploited as Zero-Day in Google Chrome
Bys sApple on Tuesday released security updates for its entire software portfolio, including a fix for a vulnerability that Google said was exploited as a zero-day in the Chrome web browser earlier this month. The vulnerability, tracked as CVE-2025-6558 (CVSS score: 8.8), is an incorrect validation of untrusted input in the browser’s ANGLE and GPU components…
Bill raising the bar for class-action suits in data breach incidents advances
Bys sRural Radio reports: A measure that would raise the bar for filing class-action lawsuits in state courts against private entities that suffer a cybersecurity breach has received first round approval in the Nebraska Legislature. Lawmakers spent a considerable amount of floor debate Tuesday and today discussing LB 241, which would require willful, wanton, or gross…
China-Linked Hackers Target Asian Governments, NATO State, Journalists, and Activists
Bys sCybersecurity researchers have disclosed details of a new China-aligned espionage campaign targeting government and defense sectors across South, East, and Southeast Asia, along with one European government belonging to NATO. Trend Micro has attributed the activity to a threat activity cluster it tracks under the temporary designation SHADOW-EARTH-053. The adversarial collective is assessed to