> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. Google is rolling out AI defenses for Android to combat messaging scams and fraudulent calls, aiming to enhance user security.
2. A new election influence campaign is leveraging hyperlocal content to manipulate AI chatbots, suggesting a future trend in political disinformation.
3. Zero-click spyware is being disseminated through targeted online ads, posing significant risks as it can infect devices without user interaction.
4. Cisco has issued a warning regarding an actively exploited vulnerability in its Secure Email Gateway, allowing remote attackers to execute commands with root privileges.
5. The Legal Aid Agency in the UK experienced a severe data breach, with records dating back to 1978 compromised, highlighting the long-term implications of such attacks.
6. Researchers also discovered fake CAPTCHA systems used to facilitate malware downloads, further illustrating the evolving tactics of cybercriminals.
7. Major vulnerabilities were reported in various platforms, including critical flaws in Palo Alto Networks' PAN-OS and Drupal, underscoring the urgent need for patches and updates.
|
// AI-powered summary generated at 20:01
Microsoft has introduced new Windows protections to defend against phishing attacks that abuse Remote Desktop connection (.rdp) files, adding warnings and disabling risky shared resources by default. [...]
Microsoft is rolling out an update to Office for the web that removes a long-standing limitation around document protection, adding new control to browser-based apps. Specifying users in the Permissions dialog (Source: Microsoft) Users can now apply sensitivity labels with user-defined permissions d...
The Kraken cryptocurrency exchange announced that a cybercrime group is trying to extort the company by threatening to release videos showing internal systems that host client data. [...]
Microsoft today pushed software updates to fix a staggering 167 security vulnerabilities in its Windows operating systems and related software, including a SharePoint Server zero-day and a publicly disclosed weakness in Windows Defender dubbed "BlueHammer." Separately, Google Chrome fixed its fourth...
How Can Non-Human Identities Revolutionize Cloud Security? Can the effective management of Non-Human Identities (NHIs) transform cloud security? When organizations increasingly pivot towards cloud infrastructures, safeguarding digital environments has become a pivotal concern across industries. With...
Can Non-Human Identities Enhance Competitive Advantage in Cybersecurity? The management of Non-Human Identities (NHIs) is critical to addressing security vulnerabilities that arise from the disconnect between security and R&D teams. Machine identities, or NHIs, play a pivotal role in creating a...
The company's new software keeps an eye on your agents and backs up data. Keep your agents close and your agent-monitoring software closer. Commvault’s new AI Protect can discover and monitor AI agents running inside AWS, Azure, and GCP environments and even roll back their actions when something go...
With the Federal Reserve Chairman meeting with bank CEOs to discuss the security implications of Claude Mythos, you can bet that your board of directors will ask you about the impact of the AI model on your cybersecurity strategy. Here’s how to prepare.Â
Key takeaways
Anthropic announced Claude M...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.9.1esr-1~deb12u1. For the stable distribution (trixie), these problems have been fixed in
One CVE under attack, one already disclosed by angry bug hunter, and 163 more Attackers exploited a spoofing vulnerability in Microsoft SharePoint Server before Redmond issued a fix as part of April's mega Patch Tuesday.…
More than 100 malicious extensions in the official Chrome Web Store are attempting to steal Google OAuth2 Bearer tokens, deploy backdoors, and carry out ad fraud. [...]
Multiple security vulnerabilities were discovered in imagemagick, a software suite used for editing and manipulating digital images, which could lead to symlink races, information leaks, denial of service and potentially arbitrary code execution. For the oldstable distribution (bookworm), these prob...
Overview of patch tuesday release from Microsoft for April 2026.
The vendor disclosed one actively exploited zero-day vulnerability in Microsoft Office SharePoint that allows attackers to view information and make changes to disclosed information.
The post Microsoft drops its second-largest monthly batch of defects on record appeared first on CyberScoop.
Security teams are stretched thin. Alerts never stop, attackers move faster, and expectations for uptime and resilience keep rising. For many IT and security leaders, Managed Detection and Response (MDR) has become less of a “nice to have” and more of a practical way to stay a...
The new N-able and Futurum Report reveals how AI is reshaping cyber resilience as it accelerates both business innovation and adversarial tradecraft. Attackers are scaling their operations with unprecedented speed, leveraging automation to bypass traditional defenses. For IT s...
tar-rs could be made to modify permissions on arbitrary directories.
USN-8138-1 fixed a vulnerability in tar-rs. This update provides the
corresponding update for Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that tar-rs incorrectly handled symlinks when unpacking
a tar archive. If a user or automated system were tricked into processing
a specia...
OpenAI says its safeguards “sufficiently reduce cyber risk” for now, while GPT-5.4-Cyber is a new cybersecurity-focused model.
The acting CISO said that AI is reshaping how the service measures and tracks cyber compliance, moving it from a box-checking exercise to something nimbler and more substantive.
The post Space Force official touts AI’s impact on cyber compliance appeared first on CyberScoop.