> TODAY'S SUMMARY (141 articles)
Today's cybersecurity highlights include General Motors settling a $220 million lawsuit over the unauthorized sale of driver data, underscoring ongoing privacy concerns. Cisco is facing active exploitation of multiple zero-day vulnerabilities in its firewall products, emphasizing the urgent need for organizations to patch their systems. Meanwhile, a Chinese hacking group has been linked to the exploitation of vulnerabilities in VMware and Cisco systems, showcasing the sophistication and persistence of nation-state threats. Data exposure remains a significant issue, with over 484,000 cloud buckets containing sensitive information publicly accessible. Additionally, the University of New Mexico suffered disruptions from a ransomware attack that diverted ambulances and canceled surgeries, further illustrating the impact of cyberattacks on critical infrastructure.
|
// AI-powered summary generated at 20:00
Li Xiong was the head of Huione Group, whose branded entities at one time included an online banking arm, cryptocurrency exchange and online marketplace which has been referred to as an “Amazon for criminals.”
The Computer Emergency Response Team of Ukraine (CERT-UA) has disclosed details of a new phishing campaign in which the cybersecurity agency itself was impersonated to distribute a remote administration tool known as AGEWHEEZE.
As part of the attacks, the threat actors, tracked as UAC-0255, sent ema...
The company filed a notice with the Securities Exchange Commission (SEC) on Wednesday warning investors that its IT team discovered unauthorized access on March 28.
What resonated most at RWC 2026? GitGuardian highlights key research on private key leaks, password managers, trusted execution environments, and secret sprawl.
The post Key Leaks, Vault Failures, and TEE Attacks: Highlights from RWC 2026 appeared first on Security Boulevard.
Most teams govern AI workloads at the application layer. They configure guardrails for their Bedrock agents, scope IAM roles per workload, and build policies around approved models. That discipline matters, but it breaks down the moment a developer spins up a new account or invokes a model directly...
The company is investigating the full scope of the incident, including whether any files have been compromised.
The post Toy Giant Hasbro Hit by Cyberattack appeared first on SecurityWeek.
New research maps the full infostealer lifecycle. Your credentials go from an employee’s device to an underground marketplace in less time than it takes your security team to notice anything is wrong. On March 24, 2026, researchers at Whiteintel’s Intelligence Division published a detailed map of th...
tar-rs could be made to modify permissions on arbitrary directories.
cargo-c could be made to modify permissions on arbitrary directories.
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Read the latest DFIR news – bias in digital forensics, crypto’s growing role in DFIR, mastering triage with ADF Pro, identifying Meta Glasses activity in iOS, and more.
The new CrystalX remote access Trojan combines pranks with full control over the victim’s computer. It also spies on its victims, steals their cryptocurrency and accounts, and uses advanced methods to bypass protection. We explain how it works, and how to avoid infection.
The malware steals credentials, installs a malicious browser extension, and can spread via USB drives.
The post New DeepLoad Malware Dropped in ClickFix Attacks appeared first on SecurityWeek.
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Author, Creator & Presenter: Kody Lundell, CEH - Senior Security Engineer at Podium
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
Permalink
The post BSidesSLC 2025 – Cybersecurity At Home...
Android requires dev identity verification for sideloaded apps; phased global rollout from September
The Iranian government is threatening to attack the Middle East operations of more than a dozen U.S. tech companies, including Microsoft, Nvidia, and Google, calling them "legitimate targets." Meanwhile, pro-Iranian threat groups expand their operations as the U.S. and Israel continues their bombin...
The American toymaking giant noted that it was continuing to "implement measures to secure its business operations," suggesting that the hackers may still be in the company's systems.
67% of US state legislators have been affected by data breaches at least once: What does this mean for US citizens?
Google has announced fixes for CVE-2026-5281, a zero-day affecting Chrome’s Dawn component.
The post Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome appeared first on SecurityWeek.