Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Cisco warned that a critical flaw in Secure Email Gateway, CVE‑2026‑76519 (CVSS 9.8), is being exploited as a zero‑day to let remote, unauthenticated attackers write files and execute commands as...
Doyensec showed a proof-of-concept path to run attacker-chosen code inside SFAPE.dll, the VBS enclave behind Windows Defender SmartScreen’s Enhanced Phishing Protection. By chaining a four-byte...
CISA has issued an advisory for Inductive Automation’s Ignition software, warning that an authenticated low-level user could elevate privileges. Inductive Automation has released fixes in Ignition...
A critical heap buffer overflow in Ghostscript (CVE-2026-39919) can be triggered via specially crafted PDFs containing JPEG 2000 images, enabling remote code execution in certain workflows such as...
The U.S. Department of Justice says North Korean state-backed hackers infiltrated at least 70 U.S. companies by posing as remote hires using stolen American identities, aided by U.S. facilitators...
Norway’s data protection authority fined Xandr, a Microsoft-owned advertising company, $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive Grindr user data via real-time...
Cyberattacks sent supermarket refrigeration systems in France to unsafe temperatures, spoiling stock at hundreds of stores across multiple chains. Some impacted sites used Danfoss controllers that...
Microsoft says its next-generation Azure Maia 300 accelerators will arrive in 2027 as a rack-scale, inference-first platform designed for agentic AI, with a 96-accelerator configuration claimed to...
Denmark’s Central Register of Persons (CPR) was breached via a small IT company’s legitimate access, with the alleged intruder telling Politiken the account password was “123456” and that multiple...
AWS introduced an enhanced Custom Event Bus for Amazon EventBridge aimed at consolidating fragmented event-driven architectures across multiple AWS accounts. The update adds shareable buses via...
AWS introduced Lambda Web Functions, an HTTP-native way to run standard Node.js web servers—like Express, Fastify, Hono, and Next.js—on Lambda without adapters or handler rewrites. The new form...
SAP’s October 2026 security updates remediate 20 vulnerabilities, headlined by a maximum-severity OAuth2 SSRF in the SAP Cloud SDK for Python (CVE-2026-89111) that allows remote, unauthenticated...