> TODAY'S SUMMARY (4 articles)
Today's cybersecurity highlights include a significant data breach involving СберСпасибо, with 3,288,711 accounts compromised. Microsoft has issued its November 2026 Patch Tuesday update, addressing 1,328 vulnerabilities, including 60 rated as critical, emphasizing the need for urgent patching. Additionally, a critical remote code execution vulnerability has been identified in Ruflo MCP Bridge version 3.16.2, posing serious risks to affected systems. Organizations are advised to prioritize updates and monitor for potential exploitation of these vulnerabilities. Overall, the cybersecurity landscape remains fraught with threats, underscoring the importance of robust security measures.
|
// AI-powered summary generated at 04:00
Oracle shipped VirtualBox 7.2.8 on April 21, 2026, as a maintenance release covering crashes, networking problems, clipboard issues, and extended Linux kernel compatibility. The update touches the VMM layer, NAT networking, graphics, UEFI, and both Linux and Windows guest support. VMM and core stabi...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de RAMÓN GRAU, S.L. (comprenant le prononcé d'une amende de 18 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance et la captation sonore sur le lieu de travail. Ce...
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
CISA gives federal agencies 4 days to patch America's lead cyber-defense agency has warned that three Cisco Catalyst SD-WAN Manager bugs are under attack, and given federal agencies just four days to patch the security holes.…
New libXpm packages are available for Slackware 15.0 and -current to fix a security issue.
This is part 1 of a two-part series on agentic AI fraud defense. Since joining Arkose Labs, one of the first things I did was go deep on the threat data — what the attack patterns actually look like, how autonomous systems probe defenses, where classification breaks down and where it holds. That dat...
The Telegram probe was launched after the Canadian Centre for Child Protection shared information that allegedly showed CSAM is present and shared on the platform, according to a press release from Ofcom.
Apache Commons IO could be made to crash if it received specially crafted input.
RapidJSON could be made to crash or run programs as an administrator if it opened a specially crafted file.
When 500,000 Findings Hide 14 Real Threats Modern enterprises ingest vulnerability data from dozens of sources: endpoint detection and response platforms, vulnerability scanners, cloud security posture tools, container image scanners. A large organization can easily accumulate hundreds of thousands...
Magnet Forensics has acquired V2 Forensics, bringing industry-first drone forensics expertise into its end-to-end digital investigation ecosystem to help investigators tackle the growing challenges of UAS evidence.
libcap could be made to modify capabilities on arbitrary files.
Several security issues were fixed in NTFS-3G.
A lawsuit from the Consumer Federation of America accuses Meta of misleading consumers about its efforts to combat scams advertisements on its platforms.
Who are ShinyHunters? Learn how this group exploits SaaS, credentials, and identity-based access—and how to prevent modern data breaches.
The post ShinyHunters: SaaS Breaches & Identity Risks (2026) appeared first on Security Boulevard.
The shift to remote and hybrid work since the pandemic expanded global hiring and accelerated digital onboarding, increasing reliance on online identity verification and remote access.
The post Detection strategies across cloud and identities against infiltrating IT workers appeared first on Microso...
NGate malware abuses HandyPay app to steal NFC card data and PINs in Brazil
A former employee of a cybersecurity firm pleaded guilty to aiding ransomware criminals to maximize their profits, with the goal of taking a cut of the ransom.
Data from browsers, cryptocurrency wallets, 200+ extensions hoovered up A ClickFix campaign targeting macOS users delivers an AppleScript-based infostealer that collects credentials and live session cookies from 14 browsers, 16 cryptocurrency wallets, and more than 200 extensions.…