> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity landscape highlights several key developments and threats. Michael LoSapio has been nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), a move that may encounter political challenges. SonicWall has issued urgent patches for seven vulnerabilities in its firewalls, with five allowing unauthenticated remote access—an indication of increasing risks to network security. Meanwhile, Microsoft’s email security filters are mistakenly blocking legitimate business communications, raising concerns about the reliability of automated security measures. Lastly, Anthropic's advanced bug-finding tool, Mythos, will be integrated into Cisco and IBM products, enhancing enterprise security capabilities without exposing the underlying model. Overall, these updates reflect ongoing vulnerabilities and the need for robust cybersecurity measures in both enterprise and governmental contexts.
|
// AI-powered summary generated at 04:00
Drupal Is Pushing an Emergency Security Update Tomorrow. If You Run a Drupal Site, This Is Not One to Miss. Something significant is coming out of the Drupal project tomorrow, and the way the announcement is worded should be enough to get any site administrator’s attention. The Drupal Security Team...
Highlight.js could be made to crash if it received specially crafted input.
The world’s largest open-source registry, node package manager (npm), has been hit by another fast-moving malware attack, this time targeting the widely-used AntV enterprise data visualization tool.
Unlike last week’s high-profile npm attack on TanStack, which exploited a c...
There is no evidence that the incident has recurred, but the flaw remains unexplained and has not been publicly acknowledged by the company.
It was discovered that Highlight.js used plain JavaScript objects for
internal language name lookups, making them susceptible to prototype
pollution attacks. An attacker could use this to cause a denial of
service or unexpected application behaviour.
Smarty could be made to run malicious JavaScript in the user's browser if it received specially crafted input.
Microsoft disrupted Fox Tempest, a malware-signing-as-a-service (MSaaS) that allowed attackers to sign malware with fake trusted certificates. Microsoft said it disrupted a cybercrime operation run by a threat actor named Fox Tempest, which helped threat actors sign malware with short-lived certific...
I wonder what's in 'external-secret-repo-creds.yaml' and 'AWS-Workspace-Firefox-Passwords.csv'?
The regulator’s announcement said the change is being made due to the “urgent need to better protect women and girls online.”
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
Learn what an account takeover is, how it can happen, and how businesses can detect and prevent attacks.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
New haveged packages are available for Slackware 15.0 and -current to fix a security issue.
Cybersecurity researchers have disclosed details of a new ad fraud and malvertising operation dubbed Trapdoor targeting Android device users.
The activity, per HUMAN's Satori Threat Intelligence and Research Team, encompassed 455 malicious Android apps and 183 threat actor-owned command-and-control...
The company unsealed a legal case in U.S. District Court on Tuesday detailing the disruption of Fox Tempest — a popular service that has operated since May 2025 and provides cybercriminals with code signing tools.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'une personne physique mineure, comprenant le prononcé d'une amende de 1 200 €, pour des manquements liés à la publication sur un réseau social d'une vidéo montrant l'agression d'un autre mineur. Cett...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre d'un syndicat de copropriétaires, comprenant le prononcé d'une amende de 1 000 €, pour des manquements liés au principe de confidentialité. Cette affaire débute par une plainte signalant la publicati...
Microsoft plans to raise the quality bar of Windows 11 drivers, as drivers "sit at the heart of every Windows experience" and connect the OS to the "silicon, components, and peripherals." [...]
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié son rapport d'activité pour l'année 2025, mettant en lumière une augmentation significative des plaintes, un montant total de sanctions inédit et un nombre record de notifications de violations de données.L'année 2025 a été ma...
Drupal says attackers may develop an exploit for the vulnerability within hours or days.
The post Drupal to Patch Highly Critical Vulnerability at Risk of Quick Exploitation appeared first on SecurityWeek.