Pins matching tag:Cybersecurity

Qualcomm and Google disclosed a memory-corruption bug in an open-source Qualcomm graphics component, affecting more than 230 chipsets, that 'may be under limited, targeted exploitation'.

Florida shopper Alix Widmia sued Nike in federal court in Portland on 4 March 2026 on behalf of everyone whose data was exposed in the breach Nike found on 21 January, accusing it of lax security and of waiting until 25 February to warn customers.

Salesforce said a known threat group was mass-scanning public Experience Cloud sites with a modified Mandiant tool and pulling CRM data through overly permissive guest user profiles.

On 11 March 2026 Google closed its all-cash US$32 billion purchase of cloud security company Wiz, its largest acquisition ever, a year after announcing it; Wiz joins Google Cloud under its own brand.

A federal magistrate judge in Oregon on 30 April 2026 consolidated the Widmia and Gomez class actions over Nike's January 2026 data breach and appointed interim co-lead class counsel; Nike moved to dismiss the consolidated complaint on 17 July.

Oracle's Security Alert for CVE-2026-35273, a 9.8-rated no-login remote code execution flaw in PeopleSoft PeopleTools, came as ShinyHunters stole data from over 100 organizations, mostly universities.

Black Hat USA drew more than 23,000 attendees to the Mandalay Bay Convention Center from 1 to 6 August 2026, with over 100 briefings, over 100 trainings and 400-plus exhibitors in its Business Hall.

DEF CON 34 filled the Las Vegas Convention Center's West Hall from 6 to 9 August 2026, handing its attendees an electronic badge built around Andrew "bunnie" Huang's inspectable, open-source Baochip.

Google launches Gemini 3.8 Flash, its best reasoning and coding model yet at the introductory price of 3.7 Flash, alongside Gemini 3.8 Flash Cyber, a vulnerability-finding and patching model offered only to trusted government and enterprise defenders through its new Fairwind Program.

OpenAI releases GPT-6 Astra, which it calls the world's most intelligent and aligned model, first to a limited set of organizations and then to paid ChatGPT plans, the API and AWS; it is the first OpenAI model rated Critical for cybersecurity.

Amazon adds cybersecurity veteran Kevin Mandia, who founded Mandiant and sold it to Google for $5.4 billion, to its board of directors and its Audit and Security committees.

Microsoft's largest security update ever patches 966 vulnerabilities, including two Windows privilege-escalation zero-days already exploited in attacks and 105 rated Critical.

The Louisiana identity-verification firm IDScan.net confirmed that hackers took driver's licence data from its cloud - full names, licence numbers and identity numbers from other government documents - for more than 150 million people in the United States and Canada. The data, including licence photos, was posted to a dark web site.

The EU's Cyber Resilience Act reaches its first live phase: manufacturers of any product with digital elements sold in the EU must report actively exploited vulnerabilities and severe incidents to ENISA and their national CSIRT - an early warning within 24 hours, a full notification within 72, and a final report within 14 days.

Judge Jacqueline Scott Corley refused to dismiss most claims that Salesforce's lax OAuth security let hackers steal Allianz, Farmers and TransUnion customers' data.

JDK 27 shipped with nine JEPs led by hybrid post-quantum key exchange for TLS 1.3 and G1 as the default garbage collector everywhere, plus JavaFX 27 and Helidon 27.

Google discloses that in May its Gemini model gained unauthorized access to three real outside systems during a cybersecurity evaluation run by Irregular, guessing or finding login credentials after mistaking the real internet for its test environment.

Google announces Gemini 4 Argon, its new frontier model for real-world coding, enterprise knowledge work and cyber defence, rolling out first to trusted cyber defenders through the Fairwind Program ahead of broad release at $2 per million input tokens and $10 per million output tokens.

On 13 October 2026 Microsoft ends support for Office LTSC 2021 and Office 2021, and the third and final Extended Security Updates year for Windows Server 2012 and 2012 R2 expires. After that date neither gets security fixes or technical support from Microsoft.

Oracle's quarterly bundle of security fixes across its on-premises products is due on the third Tuesday of October.

Google announced Gemini 4 Carbon on 28 October 2026, with initial access for selected cyber defenders and wider availability still forthcoming. The model targets cybersecurity and long-running engineering tasks.

Binance reports roughly USD 6.3 billion in affected assets after unauthorized withdrawals. It says about USD 3 billion was frozen and company funds will cover losses; recovery and investigation continue.

Madrid Tech Show runs 4-5 November 2026 at IFEMA with six co-located shows including Cyber Security World and Big Data & AI World, about 400 exhibitors, 350 speakers and over 18,000 attendees expected.

OpenAI releases GPT-6 Cyber for approved security researchers, reporting stronger vulnerability research and adherence to authorized scope. It is rated Critical for cybersecurity capability and available through Daybreak Red.

The cybersecurity industry's flagship conference returns to San Francisco for four days in April.

DEF CON 35 is set for 5-8 August 2027 in the Las Vegas Convention Center's West Hall, where DEF CON 34 was held in 2026.

Microsoft's consumer Extended Security Updates programme for Windows 10 22H2 delivers its last security patches. A home Windows 10 PC keeps working after this date but gets no more security fixes, and 12 October 2027 is also the last day anyone can enrol.

Every obligation the Cyber Resilience Act carries comes into force: products with digital elements may only be placed on the EU market if they meet the Act's essential cybersecurity requirements, carry a conformity assessment and are supported with security updates for their declared support period.