Resolved: GitHub – Actions incident
GitHub: Actions incident. The incident has been resolved.
Category Cybersecurity
News about cyberattacks, vulnerabilities, zero-day flaws, ransomware, malware, data breaches, security updates, and IT system protection.
Resolved: Cloudflare – Durable Objects Availability Issue in Eastern North America
Cloudflare: Durable Objects availability issue in Eastern North America. The incident has been resolved.
Resolved: Cloudflare – API Shield JWT Validation Errors
Cloudflare: API Shield JWT Validation Errors. The incident has been resolved.
Danish CPR Register Faced Unauthorized Access to 8.8 Million Records
Danish authorities are investigating unauthorized access to the names, addresses and CPR numbers of approximately 8.8 million records. The access was allegedly obtained by abusing a private company’s authorization.
VulnCheck Reports Attempts to Exploit CVE-2026-61500 in Rejetto HFS
Security firm VulnCheck has recorded attempts to exploit a flaw in Rejetto HFS 3.x that could allow an attacker to forge an administrator session and execute code on the server.
Updated: Citrix Adds Temporary Mitigation for Actively Exploited NetScaler Vulnerability
Citrix has also published a temporary mitigation for the actively exploited CVE-2026-88779 vulnerability. Fixed versions for affected NetScaler ADC and Gateway deployments remain available.
TA419 Phishing: Group Targeted US AI Policy Experts
Proofpoint described a TA419 phishing campaign targeting US AI policy experts. The attackers used fake professional outreach and proxy-based Microsoft 365 sign-in.
Fortra Discloses Three Critical BoKS Vulnerabilities
Fortra issued eight security advisories for BoKS. Three flaws are rated critical and affect components used to manage privileged access.
Apple to Tighten Full Disk Access in macOS Over AI Agent Risks
Apple plans additional checks in macOS when granting Full Disk Access. The company says the growing autonomy of AI agents significantly increases the risks associated with this broad access to data.
GitLab Fixes Critical Vulnerability in Self-Hosted AI Gateway
GitLab has released fixes for the critical CVE-2026-90970 vulnerability in its AI Gateway service. It affects self-hosted deployments and could allow command execution after authentication.