Elles De Yeager
-
What Is a Remote Code Execution (RCE) Vulnerability?
Remote Code Execution (RCE) vulnerabilities allow attackers to run arbitrary code on remote systems—often leading to full compromise. Learn how RCE works and how to mitigate it.
-
Ukraine Aid Groups Targeted Through Fake Zoom Meetings and Weaponized PDF Files
Phishing actors exploited fake Zoom invites and weaponized PDFs to target aid groups operating in Ukraine, blending social engineering with malicious document delivery.
-
LockBit 5.0 resurfaces with multi-platform payloads; H-ISAC warns healthcare sector
H‑ISAC and vendor research this October flag LockBit 5.0, which targets Windows, Linux and ESXi; organisations — especially healthcare — are urged to prioritise detection, backups and patching.
-
Poland arrests 55 suspects over Russian-linked espionage operations
Polish authorities report 55 arrests linked to Russian espionage and sabotage, reflecting a broader hybrid threat targeting infrastructure and logistics routes.
-
Dutch rail watchdog warns of weak defences against sabotage and cyberattacks
The Overlegorgaan Fysieke Leefomgeving warns the Dutch rail network remains vulnerable to sabotage and cyber threats, urging tighter defence coordination.
-
Drone attack hits Khartoum ahead of planned airport reopening
Cyberwarzone coverage of BBC reporting: a drone attack struck near Khartoum’s international airport a day before the terminal was scheduled to reopen. BBC is primary source.
-
Airport PA System Hack: How Attackers Hijacked Announcements in the US and Canada
Airport PA systems in the US and Canada were hijacked in October 2025, broadcasting unauthorized political messages and raising concerns about infrastructure security.
-
Microsoft October 2025 Patch Tuesday: six zero-days and 172 fixes
Microsoft’s October 2025 Patch Tuesday fixes 172 vulnerabilities, including six zero-days (three exploited, three publicly disclosed). Windows 10’s free support ends today.
-
F5 Networks breach: what we know about the October 2025 incident
F5 Networks said its engineering systems were breached in October 2025 and that attackers removed development materials including code and reports.