> TODAY'S SUMMARY (141 articles)
Today's cybersecurity highlights include General Motors settling a $220 million lawsuit over the unauthorized sale of driver data, underscoring ongoing privacy concerns. Cisco is facing active exploitation of multiple zero-day vulnerabilities in its firewall products, emphasizing the urgent need for organizations to patch their systems. Meanwhile, a Chinese hacking group has been linked to the exploitation of vulnerabilities in VMware and Cisco systems, showcasing the sophistication and persistence of nation-state threats. Data exposure remains a significant issue, with over 484,000 cloud buckets containing sensitive information publicly accessible. Additionally, the University of New Mexico suffered disruptions from a ransomware attack that diverted ambulances and canceled surgeries, further illustrating the impact of cyberattacks on critical infrastructure.
|
// AI-powered summary generated at 20:00
The most powerful cryptographic primitive you've never heard of. Zero-knowledge proofs prove you know something without revealing what you know — and they're quietly revolutionizing privacy, authentication, and blockchain technology.
The post Zero-Knowledge Proofs: How to Prove You Know a Secret Wit...
Proofpoint researchers say the group behind the surge, TA416, had turned away from Europe for a few years.
The post European-Chinese geopolitical issues drive renewed cyberespionage campaign appeared first on CyberScoop.
Microsoft warns WhatsApp on Windows users about an ongoing campaign that tries to gain permanent access to your machine
The software supply chain attack that resulted in the compromise of npm packages of Axios, an extremely popular HTTP client library, is believed to be the work of financially-motivated North Korean attackers. Links to UNC1069 On March 31, 2026, unknown attackers managed to publish two backdoored Axi...
We could tell you no for free The UK government will spend about £630,000 running a discussion panel on its digital identity card plans, which minister James Frith said will "consider different perspectives and debate trade-offs" alongside a formal consultation.…
Microsoft is calling attention to a new campaign that has leveraged WhatsApp messages to distribute malicious Visual Basic Script (VBS) files.
The activity, beginning in late February 2026, leverages these scripts to initiate a multi-stage infection chain for establishing persistence and enabling re...
Modern intrusions increasingly start with valid credentials and routine access, not exploits. Blackpoint Cyber's upcoming threat report shows how VPN abuse, RMM tools, and social engineering drive most incidents. [...]
The agency has not named the problematic foreign-made applications, but TikTok and Temu come to mind.
The post FBI Warns of Data Security Risks From China-Made Mobile Apps appeared first on SecurityWeek.
Google links the Axios npm supply chain attack to North Korean threat group UNC1069, targeting financial gain. Google has attributed the recent Axios npm supply chain compromise to a North Korean threat group tracked as UNC1069. The attack, aimed at financial gain, exploited the package to target de...
It was discovered that tar-rs embedded in cargo-c incorrectly handled
symlinks when unpacking a tar archive. If a user or automated system were
tricked into processing a specially crafted tar archive, a remote attacker
could use this issue to modify permissions of arbitrary directories outside
the e...
It was discovered that tar-rs incorrectly handled symlinks when unpacking a
tar archive. If a user or automated system were tricked into processing a
specially crafted tar archive, a remote attacker could use this issue to
modify permissions of arbitrary directories outside the extraction root,
and...
Jonathan Spalletta exploited smart contract vulnerabilities to steal approximately $55 million in cryptocurrency and cause Uranium to shut down.
The post US Charges Uranium Crypto Exchange Hacker appeared first on SecurityWeek.
Venom Stealer malware-as-a-service automates ClickFix social engineering, credential and crypto exfiltration
The cybercrime landscape has always rewarded speed — smash-and-grab credential theft, rapid account takeovers, opportunistic phishing. But the LexisNexis Risk Solutions 2026 Cybercrime Report, derived from analysis of more than 116 billion online transactions, signals a fundamental strategic shift....
Exabeam has announced the expansion of Exabeam Agent Behavior Analytics (ABA). Without direct visibility into how employees use AI assistants, what they query, what data they share, how frequently they interact, and from where, organizations cannot establish a baseline for normal AI behavior, invest...
Découvrez notre guide complet pour bien débuter avec Zabbix. Tutoriel étape par étape : installation sur Linux et supervision de vos hôtes Windows et Linux.
Le post Zabbix : le guide complet pour bien débuter sa supervision (Linux & Windows) a été publié sur IT-Connect.
Join the webcast as we explore what Agentic AI can and cannot solve today, and real world breach scenarios linked to disconnected applications.
The post Webinar Today: Agentic AI vs. Identity’s Last Mile Problem appeared first on SecurityWeek.
This is the fifth update to the TeamPCP supply chain campaign threat intelligence report, "When the Security Scanner Became the Weapon" (v3.0, March 25, 2026). Update 004 covered developments through March 30, including the Databricks investigation, dual ransomware operations, and AstraZeneca data r...
The following CIS Benchmarks and CIS Build Kits have been updated or recently released. The Center for Internet Security has highlighted the major updates below. Each Benchmark and Build Kit includes a changelog that references all changes. Updated CIS Benchmarks overview CIS Microsoft Windows 11 En...
Eight years ago, we launched 1.1.1.1 to build a faster, more private Internet. Today, we’re sharing the results of our latest independent examination. The result: our privacy protections are working exactly as promised.