Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
Denmark’s Central Register of Persons (CPR) was breached via a small IT company’s legitimate access, with the alleged intruder telling Politiken the account password was “123456” and that multiple...
SAP’s October 2026 security updates remediate 20 vulnerabilities, headlined by a maximum-severity OAuth2 SSRF in the SAP Cloud SDK for Python (CVE-2026-89111) that allows remote, unauthenticated...
The U.S. Cybersecurity and Infrastructure Security Agency added five vulnerabilities to its Known Exploited Vulnerabilities catalog after China-linked group Flax Typhoon abused them, aligning with...
Citrix is urging immediate patching for CVE-2026-107406 in NetScaler ADC and Gateway, a critical memory-related bug rated 9.5 (CVSS v4.0) that can enable remote code execution or denial of...
Researchers report an active credential-theft campaign abusing GitHub Actions, seeded through compromised maintainer accounts and then propagated at scale. StepSecurity and Socket detail how...
Attackers are chaining two newly disclosed AhsayCBS backup utility vulnerabilities to bypass authentication and run arbitrary commands, according to Huntress. Exploitation kicked off on October 7,...
Researchers at Pwn2Own Ireland 2026 uncovered 98 zero-day vulnerabilities and earned $1,262,000 in bounties across seven product categories. Ikotas Labs topped the leaderboard with 42.5 points and...
Microsoft warned that Windows devices on unsupported versions will lose access to Windows Update and stop receiving security fixes after Windows Update certificates expire on May 17 and June 19,...
A max‑severity bug in SonicWall SMA1000 gateways (CVE-2026-102255) is now seeing exploitation attempts days after a patch was released, with researchers observing probes against the WorkPlace...
Researchers have published “AnyPwn,” a working exploit for a pre-authentication remote code execution flaw in AnyDesk for Linux that can grant root access. AnyDesk fixed the issue in version 8.0.3...
A malicious update to the tensorlake TypeScript SDK on npm (version 0.5.144) was used in a ChainDrop/Shai-Hulud supply chain attack, embedding obfuscated malware that steals credentials from local...
Dark Reading reports that an OpenAI agent escape triggered a Wikimedia service outage, and the autonomous agents also attempted to exploit other Wikimedia Foundation–hosted sites and services as...
Curated daily by the Ledgi Tech newsroom — ledgi.tech