> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape reveals several significant threats and trends. The newly identified "sshole" vulnerability (CVE-2026-123158) is leading to an uptick in exploitation attempts, particularly observed through honeypot data. Additionally, a major data breach at Japanese manufacturer Iris Ohyama has compromised the personal information of approximately 7.7 million customers. On the malware front, an unknown advanced persistent threat (APT) is utilizing NetamLoader to target Windows 10 systems. In a notable incident, attackers exploited a third-party service provider to steal up to $133 million from French Bank Crédit Mutuel Arkéa. Meanwhile, law enforcement has arrested three suspects linked to the DataSuckers hacking group, which previously targeted Dodo Pizza. The evolving role of AI in cybersecurity continues to be highlighted as companies seek to bolster defenses against these increasing threats.
|
// AI-powered summary generated at 16:00
Attackers spent five months silently stealing emails from a stock exchange executive’s Outlook account in a suspected espionage operation. A threat actor quietly sat inside a senior executive’s Outlook account at a major global stock exchange for roughly 150 days, from October 2025 to March 2026. Br...
Invoices pretending to be from Amazon, PayPal, and others reveal how criminals use fear and phone calls to steal money and devices.
Coralogix offers a full-stack observability platform that unifies logs, metrics, traces, security, and AI observability.
The post Coralogix Raises $200M at $1.6B Valuation to Scale AI Observability Platform appeared first on SecurityWeek.
GStreamer Base Plugins could be made to crash or run programs if it opened a specially crafted file.
The breach at wearable ring maker Ultrahuman stemmed from credentials stolen from a malware-infected employee laptop.
BGP is vulnerable to routing hijacks and path leaks that negatively impact traffic on the Internet. RPKI helps solve some of these problems, but for some forged paths, we need to rely on a simpler mechanism: First AS enforcement in BGP.
On March 30th, 2026, we publicly disclosed a critical Remote Code Execution vulnerability in Everest Forms Pro, a WordPress plugin with an estimated 4,000 active installations.
The post Attackers Actively Exploiting Critical Vulnerability in Everest Forms Pro Plugin appeared first on Wordfence.
Known Issues
FQDN policies do not work after a Firebox reboot
Unable to create a new external interface VLAN configuration from the local Web UI of a cloud-managed Firebox
Cannot remove groups with long names from AuthPoint group syncs
Cannot remove groups with long names from Zero Trust policies
F...
Timo Longin discovered that Exim incorrectly handled certain SMTP messages
in PIPELINING/CHUNKING configurations. A remote attacker could possibly use
this issue to perform SMTP smuggling. This issue only affected Ubuntu
14.04 LTS. (CVE-2023-51766)
It was discovered that Exim incorrectly handled ce...
Cybersecurity researchers have flagged a new malspam campaign that makes use of Google's DoubleClick domain as a way to evade detection and ultimately deliver a remote access trojan (RAT) named DesckVB RAT.
"Before the victim ever reaches attacker-controlled infrastructure, the lure routes through...
L'autorité italienne de protection des données (GPDP) a adressé une demande d'informations au Centre National des Œuvres Salésiennes pour l'École concernant l'emploi de l'intelligence artificielle dans un cadre éducatif.Cette demande fait suite à des articles de presse rapportant le lancement par ce...
L'Autorité de protection des données néerlandaise (AP) a approuvé un protocole autorisant les entreprises du secteur du transport et de la logistique à partager des données concernant des chauffeurs impliqués dans des vols de cargaison.Face aux préjudices économiques importants causés par des vols d...
Hackers appeared to take over victims’ accounts even after Meta said it fixed its AI-powered support chatbot, which granted hackers access to victims’ accounts.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de DINOLIN, S.A. comprenant le prononcé d'une amende de 450 € pour des manquements en lien avec le non-respect d'une de ses décisions. Cette affaire débute par une plainte signalant le non-respect par...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de TELCOM BUSINESS SOLUTIONS S.L. (comprenant le prononcé d'une amende de 25 000 €) pour des manquements en lien avec l'utilisation de données biométriques pour la vérification d'identité et l'absence...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system. [...]
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'entreprise individuelle Sicra Press, comprenant le prononcé d'une amende de 2 000 €, pour des manquements en lien avec la gestion des demandes d'exercice de droits et le défaut de coopération av...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la municipalité de Cogoleto, comprenant le prononcé d'une amende de 4 000 €, pour des manquements liés à l'utilisation de caméras-piétons par sa police locale. Cette affaire débute par un signalem...
Read the latest DFIR news – DFIR well-being study results, agentic AI forensic blind spots, the latest ADF tools, deepfake image analysis workflows, and more.
A development flag left switched on in production builds of several Microsoft 365 Android apps disabled the check that limits account-token sharing to trusted Microsoft apps.
Any other app on the same phone could ask for the signed-in user's token and get it, then read email, open files, browse the...