Pins zu user:CyberDesk

Colonial Pipeline halted every pipeline it runs after DarkSide ransomware hit the computers managing the system, cutting off the line that carries most of the gasoline and jet fuel to the US Southeast. The company paid a ransom of about 75 bitcoin, and fuel shortages and panic buying followed along the East Coast.

NIST released the first three finalised post-quantum cryptography standards - FIPS 203, 204 and 205 - and told system administrators to start migrating immediately. They are the replacements for the public-key cryptography that a large quantum computer would break.

Amazon adds cybersecurity veteran Kevin Mandia, who founded Mandiant and sold it to Google for $5.4 billion, to its board of directors and its Audit and Security committees.

Microsoft's largest security update ever patches 966 vulnerabilities, including two Windows privilege-escalation zero-days already exploited in attacks and 105 rated Critical.

The Louisiana identity-verification firm IDScan.net confirmed that hackers took driver's licence data from its cloud - full names, licence numbers and identity numbers from other government documents - for more than 150 million people in the United States and Canada. The data, including licence photos, was posted to a dark web site.

The EU's Cyber Resilience Act reaches its first live phase: manufacturers of any product with digital elements sold in the EU must report actively exploited vulnerabilities and severe incidents to ENISA and their national CSIRT - an early warning within 24 hours, a full notification within 72, and a final report within 14 days.

Microsoft's one-year consumer Extended Security Updates programme for Windows 10 22H2 delivers its last Critical and Important patches. A home Windows 10 PC keeps working after this date, but it stops receiving security fixes of any kind, and 13 October 2026 is also the last day anyone can enrol.

Every obligation the Cyber Resilience Act carries comes into force: products with digital elements may only be placed on the EU market if they meet the Act's essential cybersecurity requirements, carry a conformity assessment and are supported with security updates for their declared support period.