IT news

cybersecurity · government-security · data-protection

“868-BACK”: Hard board for hackers

The sequel to the cult hacking game “868-HACK” is here. “868-BACK” offers complex turn-based strategy in a small space with cryptic rules.

cybersecurity · government-security · data-protection

Security update: Veeam Backup & Replication vulnerable on Linux and Windows

Vulnerabilities compromise Veeam Agent for Microsoft Windows and Veeam Software Appliance on Linux servers.

SecurityWeek49d05/28

Carnival Data Breach Exposed 6 Million People

Data breach leaves nearly 6 million Carnival customers navigating identity theft risks. The post Carnival Data Breach Exposed 6 Million People appeared first on SecurityWeek.

cybersecurity · government-security · cybercrime

BleepingComputer49d05/28

New Gogs zero-day flaw lets hackers get remote code execution

An unpatched zero-day vulnerability in the Gogs self-hosted Git service can allow attackers to gain remote code execution (RCE) on Internet-facing instances. [...]

cybersecurity · government-security · data-protection

Netzpolitik (DE)49d05/28

Hype about prediction markets continues: Bet that the Trump family will win

Regardless of whether it is crypto or prediction markets: Trump deregulates and profits. – Public domain-like released by unsplash.com: Igor OmilaevAs more countries around the world treat prediction markets as gambling, the Trump administration is transforming its regulator into an advocate for the industry. In the USA, crypto and prediction markets should be able to grow as unregulated as possible - and the Trump family benefits.

off-topicunknown-it-category-7 · unknown-it-category-6 · unknown-it-category-8

cybersecurity · government-security · data-protection

IBM and Red Hat: $5 billion for more secure open source software

5 billion US dollars, a central security clearinghouse and AI-supported analysis: IBM and Red Hat want to secure open source for the AI age.

BleepingComputer49d05/28

How SIEM helps MSPs reduce noise and stop threats faster

MSPs don't lack security data. They struggle to separate real threats from alert noise. Kaseya explains how SIEM helps MSPs improve visibility, reduce fatigue, and respond faster. [...]

borderlinecybersecurity · government-security · data-protection

general-tech · cybersecurity · government-security

Cruise giant Carnival confirms data breach affecting nearly 6 million people

The company said the threat actor gained access to a limited portion of its IT environment last month after compromising an employee account. By the end of April, Carnival determined that the attacker had copied personal information from its systems.

borderlinegeneral-tech · cybersecurity · government-security

Canadian man gets 33 years for using social media to coerce US children into sending sexual content

Prosecutors said the man spent years using fake online identities to contact children and manipulate them into sending sexually explicit images and videos.

borderlinegeneral-tech · cybersecurity · government-security

Chinese-speaking fraud gang could be stealing millions from 2026 World Cup fans

Cybercriminals have registered more than 4,300 fraudulent domains impersonating FIFA's official web presence since August 2025.

borderlinegeneral-tech · cybersecurity · government-security

Russia conducting daily attacks on UK 'from seabed to cyberspace,' spy chief warns

Anne Keast-Butler, director of GCHQ, said Russia's actions have prompted the agency to defend subsea cables and energy pipelines in British waters, disrupt Russian networks smuggling sanctioned technology and countering “reckless sabotage and assassination attempts.”

borderlinecybersecurity · government-security · data-protection

XPipe 23.0: A tool for SSH, RDP and containers

XPipe 23.0 expands the management of remote access: New are SSH certificates, proxy support and a tab system for RDP and VNC sessions.

SecurityWeek49d05/28

New BTMOB Android Malware Enables Full Device Takeover

Delivered via phishing lures, the malware combines financial theft with data exfiltration and remote access. The post New BTMOB Android Malware Enables Full Device Takeover appeared first on SecurityWeek.

cybersecurity · government-security · cybercrime

EU Commission Press Corner49d05/28

Opening address by Commissioner Hansen at the EU–Thailand Agri-Food Business Forum during the High-Level Agri-food business Mission to Thailand

European Commission Speech Bangkok, 28 May 2026 Distinguished Ministers, Excellencies, Business leaders, Ladies and gentlemen, It is a great pleasure to welcome you today to the EU–Thailand Agri-Food Business...

off-topicai · unknown-it-category-6 · unknown-it-category-7

Cloudflare Blog49d05/28

How we built Cloudflare's data platform and an AI agent on top of it

Here’s how we built Town Lake, Cloudflare's unified analytics platform, alongside Skipper, an internal AI agent running on top of it.

cybersecurity · privacy · cybercrime

EU Commission Press Corner49d05/28

Statement by President von der Leyen with Bulgarian Prime Minister Radev

European Commission Statement Brussels, 28 May 2026 Dear Prime Minister Radev, It is a great pleasure to welcome you again to the Berlaymont today. This has been a very important year for Bulgaria. Since January,...

off-topicai · unknown-it-category-6 · unknown-it-category-7

Dark Reading49d05/28

Focus on Cyber Insurance: How Quantifying Risk Is Reshaping Security

In this latest installment of the Reporters' Notebook video series, we discuss how cyber insurance is forcing organizations to quantify risk, what's covered (and what's not), and why this could be the best thing to happen to cybersecurity.

borderlinecybersecurity · government-security · regulation

Netzpolitik (DE)49d05/28

Unsafe cheap imports: EU Commission imposes a hefty fine on Temu

Temu has violated the Digital Services Act, the EU Commission announced today. – All rights reserved: IMAGO / SOPA ImagesThe Chinese online retailer Temu is sloppy in its handling of dangerous and illegal products, the EU Commission found today. After X, this is the second online service to have violated the Digital Services Act.

off-topicunknown-it-category-7 · unknown-it-category-6 · unknown-it-category-8

CP Plus 8 Ch. Network Video Recorder

View CSAF Summary Successful exploitation of this vulnerability allows an attacker's malicious script to execute in the browser of any authenticated user or administrator who accesses the affected interface. This could lead to compromise of user sessions, execution of unauthorized actions with the victim's privileges, exposure or manipulation of sensitive data, and degradation of overall system integrity. The following versions of CP Plus 8 Ch. Network Video Recorder are affected: CP-UNR-108F1 H

Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter

View CSAF Summary Successful exploitation of this vulnerability could result in an attacker gaining administrator access to the device. The following versions of Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter are affected: USR-W610 RS232/485 to Wi-Fi/Ethernet Converter 7.03T.07 CVSS Vendor Equipment Vulnerabilities v3 9.8 Jinan USR IOT Technology Limited (PUSR) Jinan USR IOT Technology Limited (PUSR) USR-W610 RS232/485 to Wi-Fi/Ethernet Converter Use of Ha

ABB EIBPORT

View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. A firmware update is available that resolves these privately reported vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited these vulnerabilities could access sensitive information stored inside the device and can change the configuration of the device. The following versions of ABB EIBPORT are affected: EIBPORT V3 KNX (2CLA963710W1001) <3.9.2 EIBPORT V3 KNX (2CSM256242R2001) <3.9.2 EIBPORT V3 KNX GSM (2CLA963720W1001) <3.9.2

XCharge C6

View CSAF Summary Successful exploitation of these vulnerabilities could allow an attacker to gain administrator rights or execute code on the affected device. The following versions of XCharge C6 are affected: C6 CVSS Vendor Equipment Vulnerabilities v3 9.8 XCharge XCharge C6 Download of Code Without Integrity Check, Stack-based Buffer Overflow, Initialization of a Resource with an Insecure Default Background Critical Infrastructure Sectors: Transportation Systems Countries/Areas Deployed: Worldwide Company Headquarters Location: United States Vulnerabilities Expand All + CVE-2026-9037 A firm

ABB Busch-Welcome 2 Wire Door Opener Actuator

View CSAF Summary ABB is aware of vulnerabilities in the product versions listed as affected in the advisory. An attacker who successfully exploited this vulnerability could gain physical, unauthorized access to a Building where the product is installed The following versions of ABB Busch-Welcome 2 Wire Door Opener Actuator are affected: Switch Actuator 4 DU vers:all/* Switch actuator, door/light 4 DU vers:all/* CVSS Vendor Equipment Vulnerabilities v3 6.8 ABB ABB Busch-Welcome 2 Wire Door Opene

MacGregor Voyage Data Recorder (VDR) G4e

View CSAF Summary Successful exploitation of these vulnerabilities could result in an attacker gaining administrator access to the device. The following versions of MacGregor Voyage Data Recorder (VDR) G4e are affected: MacGregor Voyage Data Recorder (VDR) G4e <V5.250 CVSS Vendor Equipment Vulnerabilities v3 8.3 Danelec MacGregor Voyage Data Recorder (VDR) G4e Use of Default Credentials, Insufficiently Protected Credentials, Use of Password Hash With Insufficient Computational Effort, Use of Hard-coded Credentials, Files or Directories Accessible to External Parties Background Critical Infrast

Schnieider Electric EcoStruxure Machine Expert HVAC

View CSAF Summary Schneider Electric is aware of a vulnerability in its EcostruxureTM Machine Expert HVAC product. The [EcostruxureTM Machine Expert HVAC](https://www.se.com/ww/en/download/document/EcoStruxureME_HVAC/) product is a programming software for Modicon M171-M172 logic controllers. Failure to apply the remediation provided below may risk in revealing sensitive information, which could result in disclosing protected source code, leading to loss of confidentiality. The following version