Tech news · by Ledgi Tech
Curated and fact-checked every morning by the Ledgi Tech newsroom — led by the five stories that matter most to IT teams, each with an analysis of why it matters.
University of Toronto’s Citizen Lab reports that a mercenary spyware campaign, dubbed “AdFection,” used targeted ads to deliver zero-click exploits to iOS and Android devices, infecting at least...
Attackers are planting web shells on Nextcloud servers by abusing a command-injection flaw in Collabora’s optional “Built-in CODE Server” app (richdocumentscode). The bug, fixed in version...
Google Cloud announced general availability of token-based cost management for BigQuery’s generative AI functions, introducing daily project-level and per-user quotas managed through IAM. The...
CISA added two vulnerabilities to its Known Exploited Vulnerabilities Catalog after confirming active exploitation, underscoring that such flaws are a common attack path and a serious risk to...
Attackers hijacked Internet‑connected refrigeration controllers at an estimated 700 French supermarkets, triggering defrost cycles that spoiled food and, in some cases, sparked electrical fires....
Cisco warned that a critical flaw in Secure Email Gateway, CVE‑2026‑76519 (CVSS 9.8), is being exploited as a zero‑day to let remote, unauthenticated attackers write files and execute commands as...
Doyensec showed a proof-of-concept path to run attacker-chosen code inside SFAPE.dll, the VBS enclave behind Windows Defender SmartScreen’s Enhanced Phishing Protection. By chaining a four-byte...
CISA has issued an advisory for Inductive Automation’s Ignition software, warning that an authenticated low-level user could elevate privileges. Inductive Automation has released fixes in Ignition...
A critical heap buffer overflow in Ghostscript (CVE-2026-39919) can be triggered via specially crafted PDFs containing JPEG 2000 images, enabling remote code execution in certain workflows such as...
The U.S. Department of Justice says North Korean state-backed hackers infiltrated at least 70 U.S. companies by posing as remote hires using stolen American identities, aided by U.S. facilitators...
Norway’s data protection authority fined Xandr, a Microsoft-owned advertising company, $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive Grindr user data via real-time...
Cyberattacks sent supermarket refrigeration systems in France to unsafe temperatures, spoiling stock at hundreds of stores across multiple chains. Some impacted sites used Danfoss controllers that...
Curated daily by the Ledgi Tech newsroom — ledgi.tech