> TODAY'S SUMMARY (16 articles)
Today's cyber news highlights several significant threats and trends. The Brenner Base Tunnel SE has confirmed a data breach involving 812 GB of stolen data, while Iris Ohyama reported a breach affecting 7.7 million customers. The emergence of the "sshole" vulnerability (CVE-2026-123158) is leading to increased exploitation attempts. Additionally, hackers breached French Bank Crédit Mutuel Arkéa through a third-party provider, resulting in a theft of up to $133 million. On a positive note, Brava Security has secured $15 million in funding to enhance enterprise defenses using AI. The landscape is increasingly influenced by AI, prompting predictions for identity security by 2027. Meanwhile, cyber readiness remains a critical focus for organizations as they prepare for potential incidents.
|
// AI-powered summary generated at 20:00
Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) that allowed attackers to sign malware with fake trusted certificates. Microsoft said it disrupted a cybercrime operation run by a threat actor named Fox Tempest, which helped threat actors sign malware with short-lived certific...
I wonder what's in 'external-secret-repo-creds.yaml' and 'AWS-Workspace-Firefox-Passwords.csv'?
The regulator’s announcement said the change is being made due to the “urgent need to better protect women and girls online.”
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
Learn what an account takeover is, how it can happen, and how businesses can detect and prevent attacks.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
New haveged packages are available for Slackware 15.0 and -current to fix a security issue.
Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Android device users.
The activity, per HUMAN's Satori Threat Intelligence and Research Team, encompassed 455 malicious Android apps and 183 threat actor-owned command-and-control...
The company unsealed a legal case in U.S. District Court on Tuesday detailing the disruption of Fox Tempest — a popular service that has operated since May 2025 and provides cybercriminals with code signing tools.
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié son rapport d'activité pour l'année 2025, mettant en lumière une augmentation significative des plaintes, un montant total de sanctions inédit et un nombre record de notifications de violations de données.L'année 2025 a été ma...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre d'un syndicat de copropriétaires, comprenant le prononcé d'une amende de 1 000 €, pour des manquements liés au principe de confidentialité. Cette affaire débute par une plainte signalant la publicati...
Microsoft plans to raise the quality bar of Windows 11 drivers, as drivers "sit at the heart of every Windows experience" and connect the OS to the "silicon, components, and peripherals." [...]
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'une personne physique mineure, comprenant le prononcé d'une amende de 1 200 €, pour des manquements liés à la publication sur un réseau social d'une vidéo montrant l'agression d'un autre mineur. Cett...
Drupal says attackers may develop an exploit for the vulnerability within hours or days.
The post Drupal to Patch Highly Critical Vulnerability at Risk of Quick Exploitation appeared first on SecurityWeek.
Organizations often struggle to enforce security and compliance requirements consistently across their cloud infrastructure. In one environment, a workload might be deployed in an AWS Region that was never approved for that class of data. In another, a security group might allow broader access than...
Microsoft has confirmed user reports that the Teams team collaboration app is displaying non-dismissible location prompts on some macOS systems. [...]
Fox Tempest provides a service that cybercriminals use to distribute ransomware and other malware disguised as legitimate software.
The post Microsoft Disrupts Malware-Signing Service Run by ‘Fox Tempest’ appeared first on SecurityWeek.
The org’s staying mum on the details, but Wednesday’s fixes reach back to unsupported 8.9 branches
NYC Health + Hospitals says attackers accessed its systems for months through a third-party vendor compromise, affecting at least 1.8 million people.
Key methods for cutting off AI access to an organization’s core IT assets.