> TODAY'S SUMMARY (48 articles)
Today's cyber news highlights significant threats and trends, including a major breach at Binance, where a compromised DevOps engineer's laptop facilitated the theft of approximately $6.3 billion in cryptocurrency, possibly linked to North Korean hackers. Additionally, a hacker has leaked personal data from over 41,000 Homeland Security employees, raising serious security concerns. A critical vulnerability in Drupal's Commerce Core module is being actively exploited, prompting urgent calls for patching among online store operators. Meanwhile, a compromised version of Anthropic's Claude Code extension was discovered to have installed a persistent SSH backdoor on developers' machines. Lastly, a suspected Chinese actor has gained root access to U.S. government networks via a PHP2Shell exploit, highlighting the escalating cybersecurity risks from state-sponsored threats.
|
// AI-powered summary generated at 12:00
With over 15,000 satellites in orbit, hackers are using unencrypted signals to bypass terrestrial defenses. Learn why space-based cybersecurity is no longer science fiction.
The post They’re Here! Is Your Mainframe Ready for Cyberthreats From Outer Space? appeared first on Security Boulevard.
Key Takeaways For many defense contractors, CMMC treated as a security project. It is discussed in terms of controls, readiness work, outside assessors, documentation, and the cost of getting prepared. Of course, all of that is important. But beyond that, CMMC also affects what a contractor is sayin...
Eurail B.V., a European travel operator that provides digital passes covering 33 national railways, says attackers stole the personal information of over 300,000 individuals in a December 2025 data breach. [...]
Advenica announced the File Scanner Kiosk, a system that scans USB media for malware and helps businesses reduce infection risk. With the reliance on external media for file transfers, organisations face increased vulnerability to malware. The File Scanner Kiosk addresses this challenge by providing...
At some point in the last fortnight, a security team at Stryker Corporation watched data disappear from over 200,000 devices across 79 countries at once. Not because an attacker found a gap in the perimeter. Because someone who had gotten admin access to the company’s device management platform pres...
The accused didn't just browse around; he built a custom script designed to circumvent Meta's internal detection systems.
SANS Institute reveals that AI agents are behind a 76% surge in non-human identities
The Year in Review distills Talos IR's observations into structured intelligence, but defenders should also be feeding this report back into their own preparation cycles. Here's how.
Political candidates are purchasing more home alarms, bulletproof vests, and other protections amid rising fears of political violence.
Tracked as UNC6783, the threat actor is likely linked to Mr. Raccoon, the hacker behind the alleged theft of Adobe data from a BPO.
The post Google Warns of New Campaign Targeting BPOs to Steal Corporate Data appeared first on SecurityWeek.
A convincing Microsoft lookalike tricks users into downloading malware that steals passwords, payments, and account access.
Nisos
Human Risk in Geopolitical Conflict: Iran War Lessons
The war in the Middle East that began on February 28th has dominated headlines, disrupted markets, and forced boardrooms into emergency conversations about exposure...
The post Human Risk in Geopolitical Conflict: Iran War Lessons appeared...
A hacker allegedly stole 10+ PB of sensitive military and aerospace data from China’s National Supercomputing Center, risking national security. A massive alleged breach has hit China’s National Supercomputing Center (NSCC) in Tianjin. A hacker claims to have exfiltrated over 10 petabytes of highly...
Attackers have been exploiting a zero-day vulnerability in Adobe Reader using maliciously crafted PDF documents since at least December. [...]
After years of waiting, WhatsApp is set to roll out a username feature that will allow people to connect and communicate without sharing their phone numbers. This means more privacy and better control over phone number visibility by choosing a unique username. WhatsApp username feature (Source: WABe...
The gap between vulnerability disclosure and exploitation is drastically decreasing, putting security teams’ patching practices on notice.
According to Rapid7’s latest Cyber Threat Landscape Report, confirmed exploitation of newly disclosed high- and critical-severity vulne...
Before I ever held a security title, I was a software engineer implementing vertically integrated automation systems for industrial manufacturing, warehouse-scale conveyor networks, robotic material handling, physical infrastructure controlled by software on increasingly conne...
Meta Superintelligence Labs has introduced Muse Spark, a natively multimodal reasoning model with support for tool use, visual chain of thought, and multi-agent orchestration. The release includes a Contemplating mode, which is rolling out gradually and orchestrates multiple agents that reason in pa...
Reputable researcher Haifei Li has come across what appears to be a PDF designed to exploit an unpatched vulnerability.
The post Adobe Reader Zero-Day Exploited for Months: Researcher appeared first on SecurityWeek.
Google’s threat intel team warns UNC6783, a new extortion group possibly linked to the “Raccoon” persona, is targeting BPOs and enterprises