Cyber Risk Barometer

Data loss and cyber crime, measured.

The Cyber Risk Barometer is an independent review of data loss and cyber crime, published twice a year. Between editions, this page carries the monthly round-up of what national CERTs are warning about, breach updates and new findings.

CERT round-up · 15 October 2026

Global CERT round-up: September 2026

Two Citrix zero-days exploited on four continents, Iranian spyware exposed, Denmark's threat level raised to "high", and the EU's first product-reporting duties. What national CERTs and vendor research teams warned about in September.

Read the story ›

Latest stories

  1. 1Attack on fridge controllers hits 700 French supermarkets
    In the news · 16 October 2026
  2. 2CERT-Bund groups 14 Mattermost flaws into one advisory
    Research digest · 16 October 2026
  3. 3Microsoft opens quantum-safe certificate testing to CAs
    Research digest · 16 October 2026
  4. 4Global CERT round-up: September 2026
    CERT round-up · 15 October 2026
  5. 5Phishing as a service: the kit market behind a billion lures
    Research digest · 15 October 2026

All stories

In the news · 16 October 2026
Attack on fridge controllers hits 700 French supermarkets
A cyber attack on internet-facing Danfoss refrigeration controllers left cold storage failing at more than 700 French stores, with overheating units causing food losses, smoke and fires.
Research digest · 16 October 2026
CERT-Bund groups 14 Mattermost flaws into one advisory
Germany's federal CERT has gathered 14 vulnerabilities in the self-hosted team chat platform into a single medium-severity advisory, with fixes across five release branches.
Research digest · 16 October 2026
Microsoft opens quantum-safe certificate testing to CAs
Microsoft's PQC TLS Pilot Program lets approved certificate authorities trial quantum-resistant certificates in closed environments, and urges firms to inventory certificate dependencies now.
CERT round-up · 15 October 2026
Global CERT round-up: September 2026
Two Citrix zero-days exploited on four continents, Iranian spyware exposed, Denmark's threat level raised to "high", and the EU's first product-reporting duties. What national CERTs and vendor research teams warned about in September.
Research digest · 15 October 2026
Phishing as a service: the kit market behind a billion lures
Microsoft has mapped a Chinese-language marketplace that sells hijacked cloud accounts to three phishing-kit operators. Since January their kits have helped send more than a billion phishing emails and texts to over 75,000 organisations.