Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Cisco warned that a critical flaw in Secure Email Gateway, CVE‑2026‑76519 (CVSS 9.8), is being exploited as a zero‑day to let remote, unauthenticated attackers write files and execute commands as...
Doyensec showed a proof-of-concept path to run attacker-chosen code inside SFAPE.dll, the VBS enclave behind Windows Defender SmartScreen’s Enhanced Phishing Protection. By chaining a four-byte...
CISA has issued an advisory for Inductive Automation’s Ignition software, warning that an authenticated low-level user could elevate privileges. Inductive Automation has released fixes in Ignition...
A critical heap buffer overflow in Ghostscript (CVE-2026-39919) can be triggered via specially crafted PDFs containing JPEG 2000 images, enabling remote code execution in certain workflows such as...
The U.S. Department of Justice says North Korean state-backed hackers infiltrated at least 70 U.S. companies by posing as remote hires using stolen American identities, aided by U.S. facilitators...
Norway’s data protection authority fined Xandr, a Microsoft-owned advertising company, $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive Grindr user data via real-time...
Cyberattacks sent supermarket refrigeration systems in France to unsafe temperatures, spoiling stock at hundreds of stores across multiple chains. Some impacted sites used Danfoss controllers that...
Denmark’s Central Register of Persons (CPR) was breached via a small IT company’s legitimate access, with the alleged intruder telling Politiken the account password was “123456” and that multiple...
SAP’s October 2026 security updates remediate 20 vulnerabilities, headlined by a maximum-severity OAuth2 SSRF in the SAP Cloud SDK for Python (CVE-2026-89111) that allows remote, unauthenticated...
The U.S. Cybersecurity and Infrastructure Security Agency added five vulnerabilities to its Known Exploited Vulnerabilities catalog after China-linked group Flax Typhoon abused them, aligning with...
Citrix is urging immediate patching for CVE-2026-107406 in NetScaler ADC and Gateway, a critical memory-related bug rated 9.5 (CVSS v4.0) that can enable remote code execution or denial of...
Researchers report an active credential-theft campaign abusing GitHub Actions, seeded through compromised maintainer accounts and then propagated at scale. StepSecurity and Socket detail how...
Curated daily by the Ledgi Tech newsroom — ledgi.tech