> TODAY'S SUMMARY (130 articles)
Today's cyber news highlights several significant threats and trends. The largest cryptocurrency heist in history occurred as North Korean hackers stole approximately $6.3 billion from Binance by exploiting a compromised DevOps laptop. In retail, fashion retailer Resolve reported the theft of customer payment card information due to a security breach. Additionally, a malicious update to the Claude Code extension for VS Code was found to have installed persistent SSH backdoors on developers' machines. Exploits targeting critical vulnerabilities in Drupal and GitLab are actively being leveraged by attackers, raising concerns about web security. Lastly, hackers published sensitive data of over 41,000 DHS employees, emphasizing the ongoing risks to government cybersecurity.
|
// AI-powered summary generated at 20:00
The FBIÂ Atlanta Field Office and Indonesian authorities have dismantled the "W3LL" global phishing platform, seizing infrastructure and arresting the alleged developer in what is described as the first coordinated enforcement action between the United States and Indonesia targeting a phishing kit de...
A survey of 614 cybersecurity and IT leaders finds 89% of the applications deployed are not centrally managed via a multifactor authentication (MFA) platform. Conducted by the Ponemon Group on behalf of Cerby, a provider of a platform for managing identities, the survey also notes 70% have not conf...
TL;DR
Network security monitoring excels at traffic analysis and perimeter defense, yet research shows WAF alerts generate overwhelming noise with minimal correlation to actual exploit attempts. The gap exists because network tools operate at the packet level or network edge, while application...
Google Sites lure leads to bogus root certificate Imagine getting asked to do something by a person in authority. An unknown malware slinger targeting open source software developers via Slack impersonated a real Linux Foundation official and used pages hosted on Google.com to steal developers' cred...
Cybercriminals allegedly used the W3LL phishing kit to target more than 17,000 victims worldwide, stealing their passwords and multi-factor authentication codes.
It was discovered that kvmtool did not properly manage memory under certain
circumstances. A malicious guest attacker could use this issue to cause
kvmtool to crash, leading to a denial of service, or possibly execute
arbitrary code on the host system. (CVE-2021-45464)
It was discovered that kvmtoo...
Blogs Blog Why Intelligence Requirements Fall Flat and How to Fix Them with a Practical Priority Intelligence Requirements Framework In this post, we examine why intelligence requirements often fail to drive decisions and how to operationalize Priority Intelligence Requirements to align collection,...
The incidentIn cybersecurity, the most important lessons rarely come from theory, but reality.A recent incident involving an experimental AI agent in the Alibaba ecosystem is one of those moments that forces us to pause and rethink some of our core assumptions. During what should have been just mode...
On March 2nd, 2026, we received a submission through our Bug Bounty Program for a Remote Code Execution vulnerability in Kali Forms, a WordPress plugin with more than 10,000 active installations. This vulnerability makes it possible for an unauthenticated attacker to execute code on the server. The...
xdg-dbus-proxy could be made to expose sensitive information.
rustc could be made to modify permissions on arbitrary directories.
OpenAI is rotating potentially exposed macOS code-signing certificates after a GitHub Actions workflow executed a malicious Axios package during a recent supply chain attack. [...]
Several security issues were fixed in Corosync.
When people see Customs & Border Protection's giant, tethered surveillance blimp flying 20 miles outside of Marfa, Texas, lots of them confuse it with an art installation. Elsewhere along the U.S.-Mexico border, surveillance towers get mistaken for cell-phone towers. And that traffic barrel? It'...
Booking.com has confirmed via a statement to BleepingComputer that it has detected unauthorized access to its systems that has exposed sensitive reservation and user data. [...]
Banks and financial institutions in Latin American countries like Brazil and Mexico have continued to be the target of a malware family called JanelaRAT.
A modified version of BX RAT, JanelaRAT is known to steal financial and cryptocurrency data associated with specific financial entities, as well a...
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de UNICAJA BANCO, S.A.U. (comprenant le prononcé d'une amende de 500 000 €) pour des manquements en lien avec la sécurité de son système de vidéosurveillance. Cette affaire débute par une plainte signa...
L'autorité estonienne de protection des données, l'Andmekaitse Inspektsioon (AKI), a organisé une conférence sur le rôle de la confiance et de la responsabilité en matière de protection des données.Tenue le 11 mars 2026 à Tallinn, cette conférence s'adressait aux entreprises et à leurs représentants...
The travel giant notified customers that their personal data, including names, emails, physical addresses, phone numbers may have been accessed in a security incident.
L’autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l’encontre de EVELB TÉCNICAS Y SISTEMAS, S.L., comprenant le prononcé d’une amende de 5 000 € pour des manquements liés à la sécurité des données personnelles, en particulier l’absence de sauvegardes valides ay...