Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
CISA issued an advisory on vulnerabilities affecting Hitachi Energy’s RTU500 product line, warning that successful exploitation could impact confidentiality, integrity, and availability. The...
A joint advisory from U.S. and U.K. law enforcement and Germany’s Landeskriminalamt details SafePay ransomware’s rapid expansion since August 2024, citing at least 600 victims across multiple...
Russian cybersecurity firm Solar reports that the Belarus‑aligned group Partisan Zmiy (Cyber Partisans) maintained access to a Russian healthcare organization for nearly two years, stealthily...
The US Department of Homeland Security has ordered federal civilian agencies to remove all DeepSeek products and services within 60 days, citing data sovereignty and security concerns tied to the...
ICANN is testing an authentication model—favoring SAML single sign-on—to let vetted law enforcement personnel submit urgent requests for non-public WHOIS data via its Registration Data Request...
Rank Math says a tainted build of its PRO WordPress SEO plugin (v3.0.123) was briefly served from its site, planting persistent backdoors if activated. The compromise was limited to a roughly...
Security researcher Quentin Kaiser disclosed a flaw in Broadcom’s Wi‑Fi Protected Setup implementation that lets anyone within radio range execute code as root on affected routers—no password or...
OpenCode says an intruder accessed a legacy system tied to its hosted Console service on Oct. 16, potentially exposing third-party AI provider API keys saved by 1.4% of Console users. The company...
Attackers are actively exploiting a critical OS command‑injection vulnerability (CVE-2026-106931) in the SiteGuard Server Edition web application firewall’s statistics feature, which is enabled by...
ConnectWise has taken Cloud Backup and its integrated SaaS Security and Cloud Management services offline after identifying unauthorized access to application identities in its Cloud Backup...
Security researchers warn that a malicious npm package, ‘imgdecode,’ is part of the long-running MALFEX supply chain campaign targeting Windows systems. Uploaded on September 30, 2026 by user...
Drupal released patches for two critical remote code execution vulnerabilities affecting all supported core versions, urging admins to update quickly as exploits may appear within hours or days....
Curated daily by the Ledgi Tech newsroom — ledgi.tech