> TODAY'S SUMMARY (141 articles)
Today's cybersecurity highlights include General Motors settling a $220 million lawsuit over the unauthorized sale of driver data, underscoring ongoing privacy concerns. Cisco is facing active exploitation of multiple zero-day vulnerabilities in its firewall products, emphasizing the urgent need for organizations to patch their systems. Meanwhile, a Chinese hacking group has been linked to the exploitation of vulnerabilities in VMware and Cisco systems, showcasing the sophistication and persistence of nation-state threats. Data exposure remains a significant issue, with over 484,000 cloud buckets containing sensitive information publicly accessible. Additionally, the University of New Mexico suffered disruptions from a ransomware attack that diverted ambulances and canceled surgeries, further illustrating the impact of cyberattacks on critical infrastructure.
|
// AI-powered summary generated at 20:00
A new malicious kit called EvilTokens integrates device code phishing capabilities, allowing attackers to hijack Microsoft accounts and provide advanced features for business email compromise attacks. [...]
When your network goes down, your business stops. That’s a stark truth we see confirmed daily in incident response—and N-able’s 2026 State of the SOC Report only underscores it. Backup isn’t just an IT routine anymore; it’s the backbone of your business resilience strategy. Ye...
How many times has your SOC hit crisis mode at 2:00 AM, with the dashboard blaring red and analysts scrambling to separate real threats from useless noise? We’ve all been there, and if you’re still measuring success by the number of alerts closed, chances are you’re feeling th...
SAN FRANCISCO — A new exposure is emerging in mobile security as AI begins to act on behalf of users — and attackers move to exploit that shift.
Related: RSAC wrap-up—no easy fixes for AI exposures
In a Fireside Chat … (more…)
The post Fireside Chat: AI agents are reshaping mobile attacks — and exp...
Business resilience starts at the endpoint. Between March and December 2025, the N-able SOC processed over 900,000 alerts—and a staggering 18% originated from network and perimeter exploits that most endpoint-only security never saw. Attackers are constantly shifting tactics,...
Silos are the enemy of business resilience. As IT leaders, we’ve all felt the pain: the backup administrator, SOC analyst, and endpoint engineer operating in separate worlds—often meeting for the first time in the chaos of a live cyberattack. The result? Delayed responses, mis...
In late 2024, Sydney tech entrepreneur Paul Conyngham was told his rescue dog, Rosie, had months to live. She was battling a tennis ball-sized mast cell tumor that had resisted surgery and chemotherapy. For most, this is where the story ends in heartbreak. But Conyngham, a data analyst with 17...
If you’re in IT, you know: what we don’t measure puts business resilience at risk. In the face of rising threat volumes, scaling complexity, and board-level scrutiny, tracking the right operational metrics isn’t just about visibility—it’s the foundation for proactive risk mana...
What does it really take to keep your organization running when attackers strike? The answer is business resilience—being able to detect, contain, and recover fast enough that disruptions are minimized, customers stay confident, and operations keep moving. Â
From the latest...
The modern benchmark for healthcare cyber disruption is still the 2024 Change Healthcare attack, which exposed the data of 190 million Americans and caused nationwide shutdowns of prescription processing and insurance payments. Throughout 2025, financially motivated ransomware groups copied this exa...
A survey of 500 CISOs working for U.S. organizations with more than 500 employees finds 31% acknowledging they have already seen unauthorized data exfiltration between software-as-a-service (SaaS) applications and AI tools and platforms. Conducted by the market research firm Censuswide on behalf of...
As Section 702 renewal approaches, lawmakers warn VPN users could be treated as “foreign” under US surveillance law, exposing a new privacy risk.
The security update protects a raft of older iPhones and iPads from attacks linked to leaked hacking tools called DarkSword.
Author, Creator & Presenter: Bryce Kunz
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
Permalink
The post BSidesSLC 2025 – Closing Ceremonies — Highlights, Prizes & Sponsor Shoutouts a...
Although the LiteLLM attack was reportedly tied to a group called TeamPCP, the hacking gang Lapsus$ claimed on its website that it obtained hundreds of gigabytes of Mercor’s data.
Discover why 67% of security alerts go uninvestigated and how an AI intelligence layer closes the gap without replacing your SIEM.
The post The AI Intelligence Layer for SIEM, Explained: What It Does, Why It Matters, and How to Evaluate One appeared first on D3 Security.
The post The AI Intelligence...
Unit 42 discusses the supply chain attack targeting Axios. Learn about the full attack chain, from the dropper to forensic cleanup.
The post Threat Brief: Widespread Impact of the Axios Supply Chain Attack appeared first on Unit 42.
L'Autorité de protection des données néerlandaise (AP), conjointement avec plusieurs autres autorités, la police et le ministère public, soutient l'instauration d'une interdiction européenne des applications et sites web de déshabillage par intelligence artificielle.Ces outils, qui permettent de dén...
L'autorité de protection des données islandaise, la Personuvernd, a collaboré avec plusieurs autres institutions nationales pour publier des lignes directrices communes en prévision des élections municipales du 16 mai 2026.Ces orientations, élaborées en collaboration avec la Commission des médias, l...
Several security issues were fixed in the Linux kernel.