Swiss SecurityJournal
Digital intelligence, security research and verifiable sources.
BleepingComputer · 2026-10-28
Attackers are scanning Internet-connected systems for a critical vulnerability in Oracle E-Business Suite (EBS). The recently disclosed flaw has been patched, and the probing targets systems that have not received the fix.
Read articleBleepingComputer · 2026-10-28
CISA confirmed on Tuesday that hackers are exploiting a critical vulnerability in Brotli. The flaw is also identified by the names Node2Shell, Broccoli2Shell and HTTP2Shell.
Read articleBleepingComputer · 2026-10-28
A Ukrainian national affiliated with the Nefilim and Hive ransomware operations received a 70-month prison sentence. He was involved in attacks against hospitals, government bodies and high-revenue businesses around the world from 2018 to 2021.
Read articleBleepingComputer · 2026-10-27
GMO Group urged customers to take their systems offline and power down computers following a breach of its Onamae Desktop Cloud service. The actor behind the breach threatened to deploy ransomware today.
Read articleBleepingComputer · 2026-10-27
UNM Health Sciences Center reported a cyberattack that caused outages across its systems. The incident disrupted patient care and academic activities.
Read articleNational Cyber Security Centre · 2026-10-20
The National Cyber Security Centre has introduced a chapter on AI in its research problem book. The announcement describes a major shift at the intersection of artificial intelligence and cyber security.
Read articleCybersecurity and Infrastructure Security Agency · 2026-10-19
The Cybersecurity and Infrastructure Security Agency issued an advisory describing SafePay ransomware activity against businesses and critical infrastructure in the Americas, Europe and Australia, noting that the group has been highly active since August 2024. The advisory describes entry methods involving stolen or guessed passwords, security-system vulnerabilities and phishing, followed by account creation or takeover and use of legitimate tools to traverse networks, locate valuable files and disable protections.
Read articleNational Cyber Security Centre · 2026-10-15
The National Cyber Security Centre has published recommendations on configuring TLS with post-quantum cryptography. It advises beginning the migration now.
Read articleNational Cyber Security Centre · 2026-09-17
The National Cyber Security Centre describes adversary simulation, also known as red teaming. It tests capabilities for preventing cyber attacks, detecting them and responding to them.
Read articleNational Cyber Security Centre · 2026-09-15
UK and allies provide advice to help organisations and individuals at risk detect and counter the threat from CHOSEN BRICK malware.
Read articleNational Cyber Security Centre · 2026-09-15
Advisory on CHOSEN BRICK malware, including technical analysis and advice to help individuals and organisations protect themselves.
Read articleCybersecurity and Infrastructure Security Agency · 2026-09-04
CISA, NSA and FBI issued a joint advisory warning that AI companies based in China are using large-scale knowledge distillation to extract restricted capabilities and proprietary functionality from leading U.S. AI models. The agencies described these targeted activities as malicious and central to the companies’ development strategies, while acknowledging that distillation also has legitimate research uses.
Read articleCybersecurity and Infrastructure Security Agency · 2026-08-20
CISA reported contrasting defensive responses during concurrent red team assessments of two organizations, although both environments experienced complete domain compromise and access to sensitive business systems and cloud resources. Organization A neither detected nor contained the activity, while Organization B quickly detected initial intrusion attempts and isolated affected systems, requiring the assessment to proceed under an assumed-breach model.
Read articleCybersecurity and Infrastructure Security Agency · 2026-08-05
CISA issued an advisory on Gunra, a ransomware variant that emerged in 2025 and became a ransomware-as-a-service operation in 2026, with affiliates targeting government bodies, critical infrastructure entities and other organizations. The advisory describes attackers encrypting data and threatening to release stolen information unless a ransom is paid, and provides technical details alongside detection and mitigation guidance.
Read articleCybersecurity and Infrastructure Security Agency · 2026-07-21
CISA reported that Russian state-backed cyber actors have targeted and compromised Western government and commercial organizations running Zimbra Collaboration Suite since at least July 2025. The announcement describes a phishing campaign attributed to an advanced persistent threat group primarily tracked as LAUNDRY BEAR.
Read articleCybersecurity and Infrastructure Security Agency · 2026-07-08
CISA warned that cyber actors from Center 16 of Russia’s Federal Security Service continue exploiting networking equipment with vulnerabilities or configuration weaknesses worldwide, compromising networks across multiple critical infrastructure sectors. The joint advisory expands on an earlier FBI announcement about activity spanning more than a decade, providing further details on attacker methods to help defenders counter the threat.
Read article