The last 30 days of cyber threats for education and government (354 items).
AI-assisted summaries and fixes, sources cited.
High · Security Affairs ·
A November 3 review of U.S. county election portals found 42% hosted outside .gov, with weak email safeguards and third-party trackers affecting millions of voters.
Informational · The Register — Security ·
A review dated 29 October 2026 found an administrator using a profanity-filled password, a sign of lax security practices that could give hackers an opening.
High · Security Affairs ·
Attackers used ENGIE's partner sales tool to reach personal details and energy contract records for customers in France, while banking information was reportedly not affected.
High · SecurityWeek ·
Hackers reached outside business systems used by iRhythm, exposing personal, account and device-related data for about 8.2 million individuals and prompting an HHS filing.
Informational · Dark Reading ·
Security researchers are examining unexplained threat activity across Italy; no CVE has been tied to the patterns, and technical details remain limited.
Informational · Help Net Security ·
Nathan Smolenski of Qualys says machine-assisted bug hunting contributed to a small slice of 2025 exploitation, urging exposure tracking, asset tiers, human checks, rollback plans, and careful automation.
Informational · Help Net Security ·
Sectigo's poll of 500 IT leaders found 61% endured a certificate outage in the prior year, yet only 4% had fully automated certificate management.
Informational · Help Net Security ·
A 1,111-person ITRC survey found 197 identity theft victims reporting distress, self-blame and sleep loss, underscoring recovery burdens beyond financial loss.
Informational · Help Net Security ·
A Help Net Security report on MS-ISAC findings links stolen employee credentials to phishing, account hijacking and intrusions that spread between K-12 districts.
Informational · Graham Cluley ·
Episode 490 examines claims of executive iPhone targeting, a disclosed flaw in security-key safeguards, and commentary from Ball, Randolph, and Cluley.
Informational · Hackread ·
APNIC is evaluating IPv4 address transfers, block assessments, fee structures and approval workflows across the Asia-Pacific region.
Informational · The Record ·
A federal appellate panel has invalidated a statewide West Virginia statute, raising immediate questions about how agencies handle personal information disclosures.
Informational · BleepingComputer ·
American investigators have taken control of Virtualine's flagship web address, disrupting a hosting service accused of enabling criminal activity.
High · The Record ·
Hackers accessed personal details of roughly two thousand Japan Airlines customers, prompting the airline to notify those affected.
High · Dark Reading ·
A cybercrime crew's GitHub-based supply-chain effort lost momentum, yet the group remains active on the platform and is pivoting toward developer workstations and cloud credentials.
Informational · Hackread ·
Fraud controls work best when behavioral signals guide automated decisions and staff review catches ambiguous cases that would otherwise block legitimate users.
Informational · BleepingComputer ·
Open Discord communities marked discoverable can have messages read without signing in and surfaced in search results, raising privacy concerns for members and admins.
Informational · The Record ·
noyb has filed a lawsuit against Scale AI, alleging its AI data platform tracked freelancers through keystroke and mouse monitoring.
Informational · The Record ·
The US Treasury Department designated individuals linked to Russian and North Korean nationals and DPRK-backed illicit IT work, citing laundered earnings.
Informational · The Hacker News ·
Starting December 1, approved third-party Android marketplaces can request permission, verify identity, submit catalogs, and pass ongoing malware checks to gain one-tap installs and background updates.
High · BleepingComputer ·
Sony Network Communications has acknowledged an ISP-related breach in which about 2.5 million customer records were exposed and personal details were compromised.
Medium · The Hacker News ·
Orange Tsai of DEVCORE disclosed a logic-flaw chain that broke out of Microsoft Edge’s sandbox and enabled code execution, after a $175,000 contest win and a five-month wait.
Informational · Hackread ·
Attackers are disguising automated scanners as well-known AI crawlers, using 32 bot identities to find credentials, keys and cloud configs left on public sites.
Informational · Dark Reading ·
Hospitals are putting medical artificial intelligence into use faster than security teams can govern it, creating systemic exposure without a specific CVE to patch.