> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. Google is rolling out AI defenses for Android to combat messaging scams and fraudulent calls, aiming to enhance user security.
2. A new election influence campaign is leveraging hyperlocal content to manipulate AI chatbots, suggesting a future trend in political disinformation.
3. Zero-click spyware is being disseminated through targeted online ads, posing significant risks as it can infect devices without user interaction.
4. Cisco has issued a warning regarding an actively exploited vulnerability in its Secure Email Gateway, allowing remote attackers to execute commands with root privileges.
5. The Legal Aid Agency in the UK experienced a severe data breach, with records dating back to 1978 compromised, highlighting the long-term implications of such attacks.
6. Researchers also discovered fake CAPTCHA systems used to facilitate malware downloads, further illustrating the evolving tactics of cybercriminals.
7. Major vulnerabilities were reported in various platforms, including critical flaws in Palo Alto Networks' PAN-OS and Drupal, underscoring the urgent need for patches and updates.
|
// AI-powered summary generated at 20:01
Most ransomware discussions focus on encryption, downtime, and recovery. But the real story is what happens before any of that becomes visible. Recent reporting from Cyber Security News highlights how attackers are increasingly using “EDR killers” to quietly disable endpoint protection tools early i...
Critical infrastructure was once considered too complex and isolated to be a primary cyber target. That assumption no longer holds. New reporting from Cyber Security News reveals that the Iran-linked CyberAv3ngers group is actively targeting water utilities, energy systems, and industrial controller...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre d'AXA SEGUROS GENERALES, S.A. DE SEGUROS Y REASEGUROS, comprenant le prononcé d'une amende de 200 000 €, pour des manquements en lien avec la sécurité des données personnelles dans le cadre de la pro...
The modern enterprise runs on collaboration tools. Platforms like GitHub and Jira are deeply embedded in daily workflows, powering everything from development to project management. But that same trust is now being weaponized. New reporting from Cyber Security News reveals how attackers are exploiti...
The legislation bars the sale of geolocation within a 1,750 foot radius, a buffer large enough to keep data brokers from pinpointing where consumers live, work, worship, shop and otherwise travel.
Critical ColdFusion vulnerabilities are the most at risk of being exploited in attacks, according to the software giant.
The post Adobe Patches 55 Vulnerabilities Across 11 Products appeared first on SecurityWeek.
A malicious Ledger Live app for macOS available from Apple's App Store has drained approximately $9.5 million in cryptocurrency from 50 victims in just a few days this month. [...]
European regulators have largely been frozen out of early access to Anthropic’s new Mythos model, Politico reports. The AI technology, aimed at cybersecurity use cases, is said to be able to identify and exploit technical vulnerabilities at a level that surpasses most humans —...
The social engineering campaign spiked last month and has targeted dozens of organizations since May 2025, according to ReliaQuest.
The post Black Basta’s playbook lives on as former affiliates launch fast-scale intrusion campaign appeared first on CyberScoop.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de ARES CAPITAL, S.A. (comprenant le prononcé d'une amende de 280 000 €) pour des manquements en lien avec le traitement des données personnelles de ses employés conducteurs via des applications mobile...
L'autorité finlandaise de protection des données a publié une décision de sanction à l'encontre de Lepus Asset Management Oy pour des manquements en lien avec la prospection commerciale par appels automatisés sans le consentement des personnes concernées. Cette affaire débute par plusieurs plaintes...
There is an almost reflexive habit in data engineering: whenever you instrument an event, you attach a user ID. It feels natural. User IDs are how you join tables, track behavior, and measure engagement. The problem is that most teams attach them without ever asking whether they actually need them....
Le Comité Européen de la Protection des Données (CEPD) a adopté un modèle d'Analyse d'Impact relative à la Protection des Données (AIPD) visant à faciliter la conformité et à renforcer la cohérence au sein de l'Europe.Cette initiative, qui s'inscrit dans la lignée de la Déclaration d'Helsinki, a pou...
L'Agence espagnole de protection des données (AEPD) a publié une décision à l'encontre du Service aragonais de la santé (SALUD) pour des manquements en lien avec la gestion des accès aux dossiers médicaux de ses patients. Cette affaire débute par une plainte déposée le 14 juillet 2023, après que la...
This is a current list of where and when I am scheduled to speak:
I’m speaking at DemocracyXChange 2026 in Toronto, Ontario, Canada, on April 18, 2026.
I’m speaking at the SANS AI Cybersecurity Summit 2026 in Arlington, Virginia, USA, at 9:40 AM ET on April 20, 2026.
I’m speaking at the Nemertes [N...
In September 2024, Amandla Thomas-Johnson was a Ph.D. candidate studying in the U.S. on a student visa when he briefly attended a pro-Palestinian protest. In April 2025, Immigration and Customs Enforcement (ICE) sent Google an administrative subpoena requesting his data. The next month, Google gave...
Google's Failure to Warn Users About Law Enforcement Demands for Data Is DeceptiveSAN FRANCISCO – The Electronic Frontier Foundation sent complaints today to the attorneys general of California and New York urging them to investigate Google for deceptive trade practices, related to the company's bro...
Two high-severity security vulnerabilities have been disclosed in Composer, a package manager for PHP, that, if successfully exploited, could result in arbitrary command execution.
The vulnerabilities have been described as command injection flaws affecting the Perforce VCS (version control software...
After the U.S. Treasury last year sanctioned the Funnull CDN it used, the Triad Nexus scam network changed up its operations and began using major cloud services providers, creating front companies, and shifting away from targeting U.S. victims, instead is focusing on those in Asia, according to Si...
Microsoft has rolled out a fast-track process to help developers regain access to accounts recently suspended from its Windows Hardware Program, following widespread complaints that they were locked out without warning. [...]