C-Track Data Breach Affected Court Records in the U.S. and Ontario
An incident involving Thomson Reuters’ C-Track system may have exposed sensitive court-record data in 12 U.S. states, the U.S. Virgin Islands and Ontario.
Tag cybersecurity
Cisco Releases Critical Fixes for Secure Email, IOS XR and Nexus 9000
Cisco published security advisories for Secure Email, IOS XR and Nexus 9000. Several vulnerabilities reach a CVSS score of 9.8; at the time of publication, the manufacturer had no evidence of malicious exploitation.
All-in-One WP Migration and Backup WordPress Plugin Fixes Flaw That Could Enable Site Takeover
The All-in-One WP Migration and Backup WordPress plugin has fixed vulnerability CVE-2026-19949. Operators should update to version 7.110 or later.
CISA Adds Kestra OSS Vulnerability to Actively Exploited Vulnerabilities List
CVE-2026-49869 allows unauthenticated attackers to bypass Basic Auth, create workflows and, under certain conditions, execute commands in the worker. Versions 1.0.45 and 1.3.21 fix the issue.
CISA Adds Switchvox Vulnerability to KEV Catalog
CISA added CVE-2026-9586 in Sangoma Switchvox SMB to the Known Exploited Vulnerabilities catalog. The unauthenticated SQL injection could lead to remote code execution; a fix has been available since July.
Google Introduces Gemini 3.8 Flash; Cyber Version Limited to Partners
Google has made Gemini 3.8 Flash available through the Gemini API and introduced the limited Flash Cyber model for Fairwind program partners.
Attacker Accessed Dropbox Accounts Through a Lenovo ID Issue
Dropbox warned some users about unauthorized access to their accounts. The attacker reportedly exploited email verification in Lenovo ID to sign in without knowing the Dropbox password.
Microsoft Defender Safe Links incorrectly blocks legitimate Google Search links
Microsoft is addressing incident MO1465962, in which Safe Links in Defender for Office 365 is marking legitimate URLs from Google Search as malicious.
GeoNetwork fixes vulnerability chain enabling remote command execution
The GeoNetwork project published security advisories concerning unauthenticated formatter uploads and a Saxon XSLT flaw. Versions 4.4.12 and 4.2.17 also address CVE-2026-58400, which has a CVSS score of 9.1.
U.S. Unseals Indictment Against Russian National in Freelance Platform Phishing Case
The U.S. has unsealed an indictment against Searzhudin Aktulayev. According to prosecutors, he allegedly participated in a campaign involving malicious Excel attachments sent to users of an unnamed freelance platform.