Cyber News
Stay informed on the latest cybersecurity threats, incidents and regulatory updates across Sweden, the Nordics, and Europe.
Spain’s Data Regulator Logs First Breach Blamed on an Autonomous AI Agent
September 17, 2026 Researchers Say OpenAI Agents Probed a RubyGems Flaw Humans Found in July
One of the packages uploaded to rubygems.org during the May incident carries a comment above its payload: # malicious crawler/exfil for Southwark Jan 2026 docs…
Revolut Handed Passports And Transaction Histories To A Fake Government Request
September 15, 2026 Dutch NCSC Expects Mass Exploitation of Two Critical Check Point VPN Flaws
September 14, 2026 Anthropic Report Finds AI Has Erased The Gap Between Hackers And States
September 11, 2026 Cisco Confirms Root-Access Flaw Already Exploited by Ransomware and State Hackers
September 10, 2026 ENISA’s CRA Reporting Platform Opens Friday: Mandatory Filings Only, No API
The Cyber Resilience Act's reporting clock starts on Friday 11 September, and ENISA has now set out what its Single Reporting Platform will do on…
N-able Patches Critical N-central RCE as Fourth Hotfix Lands in Five Weeks
N-able released a fourth emergency hotfix for its N-central platform over the weekend, closing a pre-authentication remote code execution flaw that an attacker can trigger…
State Funded AI Bot Network Ran 1,200 Fake Swedish Accounts on X
September 4, 2026 SonicWall SMA 1000 Hit by a Third Exploited Zero-Day Chain Since December
September 3, 2026 Försäkringskassan Refers Two Staff to Prosecutors Over Google Translate Data Leak
September 2, 2026 PaperCut Attacks Escalate to Hands-On Intrusions as CISA Sets Deadline
Attackers exploiting two PaperCut NG/MF vulnerabilities have stopped scanning and started working inside the systems they have already compromised. WatchTowr, which has tracked exploitation since…
Finnish Appeals Court Revives Eagle S Prosecution Over Baltic Cable Breaks
The Helsinki Court of Appeal has revived Finland's collapsed prosecution of three senior officers of the Eagle S, the Russia-linked oil tanker that dragged its…
CISA Red Teamed Two Critical Networks. One SOC Caught It in Minutes.
CISA's red team reached full domain compromise at two critical infrastructure organisations using much the same tradecraft. At one, the security operations centre isolated every…
Third DDoS Attack Since June Disrupts Norway’s Shared Government Login Services
A denial-of-service attack that began at 03.38 on Monday 24 August left ID-porten and nine other shared Norwegian government services unstable for roughly 30 hours.…
One Phone Call Put ShinyHunters Inside ReliaQuest’s Okta Dashboard
On 22 August an attacker phoned several employees at ReliaQuest, an American managed detection and response provider, and presented themselves as a named member of…
CERT-SE Urges Intrusion Checks After Citrix Patches Critical NetScaler Bypass
Citrix patched a critical authentication bypass in NetScaler ADC and NetScaler Gateway on 19 August 2026. CERT-SE published its own advisory the following day and…
Uber Fined 825 Million Euros Because No Human Checked the Algorithm
August 25, 2026 Iran-Linked Attack Took a Small UK Power Plant Offline for Four Days
August 24, 2026