> TODAY'S SUMMARY (48 articles)
Today's cyber news highlights significant threats and trends, including a major breach at Binance, where a compromised DevOps engineer's laptop facilitated the theft of approximately $6.3 billion in cryptocurrency, possibly linked to North Korean hackers. Additionally, a hacker has leaked personal data from over 41,000 Homeland Security employees, raising serious security concerns. A critical vulnerability in Drupal's Commerce Core module is being actively exploited, prompting urgent calls for patching among online store operators. Meanwhile, a compromised version of Anthropic's Claude Code extension was discovered to have installed a persistent SSH backdoor on developers' machines. Lastly, a suspected Chinese actor has gained root access to U.S. government networks via a PHP2Shell exploit, highlighting the escalating cybersecurity risks from state-sponsored threats.
|
// AI-powered summary generated at 12:00
ESET Kernel Service hotfix for ESET Server Protection version 12.1 has been released.
In December 2025, hackers stole names and passport numbers from the European travel company’s network.
The post 300,000 People Impacted by Eurail Data Breach appeared first on SecurityWeek.
Alerte OFII : ce que révèle vraiment le courrier envoyé aux usagers après la compromission de données personnelles.
Information published.
Information published.
Even fitness equipment is vulnerable to mischief makers these days PWNED Welcome back to Pwned, the column where we share war stories from IT soldiers who shot themselves – or watched someone else shoot themselves – in the foot. Today's tale shows that even when you're setting up something as simpl...
Information published.
Information published.
Bitcoin Depot, which operates one of the largest Bitcoin ATM networks, says attackers stole $3.665 million worth of Bitcoin from its crypto wallets after breaching its systems last month. [...]
Information published.
Information published.
Your Email is Encrypted Today, but Will It Hold Up Tomorrow? Awakening one day to discover that every “secure email” you’ve ever written was not secure at all. Your client contracts, financial spreadsheets, and confidential boardroom conversations… all revealed as if they were open texts. It’s the q...
Information published.
Information published.
Exposed ICS devices and insecure protocols like Modbus increase risks to critical infrastructure, enabling disruption, data access, and potential sabotage. Malware targeting industrial control systems (ICS) poses a serious risk to critical infrastructure, with threats like Stuxnet, Industroyer, Trit...
Information published.
Information published.
Les pirates utilisent des boutiques Magento compromises avec PolyShell pour voler les numéros de cartes bancaires des clients à l'aide d'une image SVG.
Le post E-commerce : une image SVG est utilisée pour voler les données bancaires a été publié sur IT-Connect.
The time is maybe Quantum computing exists in a sort of superposition with regard to cryptography – it's both a pending threat and a technology of no immediate consequence for decryption.…
TL;DR — Without an identity layer, AI agents accessing enterprise tools create real exposure: data exfiltration through unscoped access, audit failures when no one can trace which user authorized which tool call, and lateral movement when a compromised agent inherits a service account’s permissions....