> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
AI is rapidly changing how software is written, deployed, and used. Trends point to a future where AIs can write custom software quickly and easily: “instant software.” Taken to an extreme, it might become easier for a user to have an AI write an application on demand—a spreadsheet, for example—and...
200 orgs and 5,000 devices compromised so far in Vlad's latest intelligence grab, Microsoft reckons The UK's National Cyber Security Centre (NCSC) has issued a fresh warning about Russia's ongoing targeting of routers to steal passwords and other secrets.…
Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for building custom LLM apps and agentic systems to execute arbitrary code. [...]
Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backed Russian hackers to quietly siphon authentication tokens fr...
Fancy Bear, also known as APT28, has taken over thousands of residential home routers to steal passwords and authentication tokens in a wide-ranging espionage operation.
The Russia-linked threat actor known as APT28 (aka Forest Blizzard) has been linked to a new campaign that has compromised insecure MikroTik and TP-Link routers and modified their settings to turn them into malicious infrastructure under their control as part of a cyber espionage campaign since at l...
AttackIQ has released a new assessment template that emulates the behaviors of RoningLoader, a multi-stage loader observed in recent intrusion campaigns. RoningLoader operates through a layered execution chain, enabling stealthy delivery and execution of follow-on payloads while evading traditional...
The FBI’s annual report on digital crimes exposes a worsening environment. Yet, an unknown number of victims still suffer in the shadows never reporting the crimes they endure.
The post Cybercrime losses jumped 26% to $20.9 billion in 2025 appeared first on CyberScoop.
The cybersecurity response to AI-enabled nation-state threats cannot be incremental. It must be architectural.
The post The New Rules of Engagement: Matching Agentic Attack Speed appeared first on SecurityWeek.
The startup has created a layered security solution aiming to secure AI agents throughout their entire lifecycle.
The post Trent AI Emerges From Stealth With $13 Million in Funding appeared first on SecurityWeek.
The missive, obtained by Recorded Future News, arrives days before policymakers return from recess next week and aim for a quick extension Section 702 of the Foreign Intelligence Surveillance Act (FISA) for another 18 months.
La Commission Nationale de l'Informatique et des Libertés (CNIL) a présenté son programme de travail pour l'année 2026, détaillant les ressources et les chantiers prévus pour accompagner les professionnels dans leur mise en conformité.La CNIL prévoit d'initier des travaux sur le recueil du consentem...
Le président de l'Office de protection des données personnelles (UODO) polonais a sollicité une révision législative auprès des ministres de l'Intérieur et de la Justice, pointant les lacunes de la loi nationale transposant la directive 2016/680, dite « police-justice ».La législation polonaise actu...
The Russian state cyber group APT28 has been compromising routers to hijack web traffic and spy on victims, the UK’s The National Cyber Security Centre (NCSC) has warned. Attackers are exploiting vulnerable routers to alter DHCP and DNS settings, redirecting traffic through servers they control. “We...
L'autorité britannique de protection des données (ICO) lance une campagne de sensibilisation pour aider les parents à aborder la protection des données personnelles en ligne avec leurs enfants.La campagne, intitulée "Sensibilisés à la vie privée", s'adresse aux parents d'enfants âgés de 4 à 11 ans....
Si un Mac reste allumé trop longtemps, il risque de perdre l'accès au réseau après exactement 49 jours, 17 heures, 2 minutes et 47 secondes d'activité.
Le post Votre Mac peut perdre sa connexion Internet après exactement 49 jours a été publié sur IT-Connect.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de la fondation TRILEMA, comprenant le prononcé d'une amende de 3 600 €, pour des manquements liés à la publication d'images d'un mineur sur internet et les réseaux sociaux sans disposer d'une autorisa...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de NAROBESA INV, S.L. comprenant le prononcé d'une amende de 1 000 € pour des manquements en lien avec la consultation illicite d'un fichier de solvabilité patrimoniale dans le cadre d'un processus d...
Signature Healthcare and Signature Healthcare Brockton Hospital said on Monday that the cyber incident is impacting many of their information systems.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'AVATEL TELECOM, S.A., comprenant le prononcé d'une amende de 300 000 €, pour des manquements en lien avec la sécurité des données personnelles. Cette affaire débute par la notification d'une violatio...