> TODAY'S SUMMARY (15 articles)
Today's cybersecurity news highlights several significant threats and trends. South Africa leads a 13.4% growth in Sub-Saharan Africa's crypto economy, indicating increasing financial reliance on cryptocurrencies. A new zero-day vulnerability in VMware ESX, exploited by China-linked hackers, has been added to the U.S. CISA's Known Exploited Vulnerabilities catalog. WordPress released a critical update addressing 22 vulnerabilities, including one allowing remote code execution. Additionally, threat actors are exploiting PHP2Shell vulnerabilities in publicly accessible Palo Alto Networks management interfaces. Meanwhile, the Multi-State Information Sharing and Analysis Center reported credential theft affecting K-12 school districts, highlighting ongoing challenges in credential security.
|
// AI-powered summary generated at 08:00
A new report from 404 Media sheds light on how automated license plate readers (ALPRs)Â could be used beyond the press releases and glossy marketing materials put out by law enforcement agencies and ALPR vendors. In December 2025, Georgia State Patrol ticketed a motorcyclist for holding a cell phone...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.9.0esr-1~deb12u1. For the stable distribution (trixie), these problems...
The Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are actively exploiting a critical vulnerability identified as CVE-2026-33017, which affects the Langflow framework for building AI agents. [...]
Kaspersky found Coruna iOS exploits reuse updated code from the 2023 Operation Triangulation attacks, suggesting a possible link. Kaspersky researchers discovered that the Coruna iOS exploit kit uses an updated version of the same kernel exploit seen in the 2023 Operation Triangulation campaign. Whi...
Author, Creator & Presenter: Joshua Boyles - VP Of Cybersecurity At LHMCO)
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
Permalink
The post BSidesSLC 2025 – Guerrilla GRC – Helping Small...
Author, Creator & Presenter: Joshua Boyles - VP Of Cybersecurity At LHMCO)
Our thanks to BSidesSLC for publishing their Creators, Authors and Presenter’s outstanding BSidesSLC 2025 content on the Organizations' YouTube Channel.
Permalink
The post BSidesSLC 2025 – Guerrilla GRC – Helping Small B...
Move over shadow IT; shadow AI is the new risk on the scene. The explosion of available AI tools, leadership’s enthusiasm for the new technology, the push for employees to do more with less, nascent governance and the sheer speed at which AI is evolving has created the perfect...
Web shells are malicious scripts that give attackers persistent access to compromised web servers, enabling them to execute commands and control the server remotely. These scripts exploit vulnerabilities like SQL injection, remote file inclusion (RFI), and cross-site scripting (XSS) to gain entry.
O...
Two measures aim to make it harder for robocallers to obtain valid U.S. phone numbers and pressure companies to onshore call center services.Â
The post FCC pushes new rules to crack down on robocallers, foreign call centers appeared first on CyberScoop.
World Leaks is a cyber extortion operation that steals sensitive data from organizations and threatens to leak it via the dark web if a ransom is not paid.
Read more in my article on the Fortra blog.
Why Your Static Credentials Are a Ticking Time Bomb The TeamPCP campaign, one of the largest credential theft campaigns of 2026, began with a compromise in Trivy. A security tool trusted to scan for vulnerabilities and leaked secrets was weaponized against the very environments it was meant to prote...
Hambardzum Minasyan appeared in an Austin federal court on Tuesday and was indicted on charges of conspiracy to commit access device fraud, conspiracy to violate the Computer Fraud and Abuse Act and conspiracy to commit money laundering.
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed a vulnerability in HikVision, as well as 10 in TP-Link, and 19 in Canva.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability dis...
In the world of data centers, energy efficiency isn’t just a buzzword—it’s a vital part of running a cost-effective and sustainable operation. As technology demands grow, so does the need to monitor exactly how much energy is being used and where it’s going. This is where metrics like Power Usage Ef...
Rapid7's research reveals China-linked kernel implants deep inside telecom signaling infrastructure. Here's what BPFdoor is, how it evolved, and what defenders need to do now.
The post BPFdoor in Telecom Networks: The FCC Is Securing the Edge, but China’s Hackers Are Already Past It appeared f...
In this week's newsletter, Amy draws parallels between the collaborative themes of "Project Hail Mary" and the massive team effort behind the newly released Talos Year in Review report.
Government agencies face growing pressure to respond to FOIA requests quickly while protecting classified data. Modern redaction software streamlines FOIA workflows while ensuring compliance.
The post How redaction software can help government agencies comply with FOIA appeared first on Security Bou...
Kubernetes powers your products, but it quietly hijacks your engineering organization. Every year, you pay senior engineers to wrestle with version bumps, API deprecations, and broken add‑ons that don’t move a single KPI your customers care about. Numbers vary by environment, but in many mid‑s...
Several security issues were fixed in CryptX.
Discover the importance of DCiE (Data Center Infrastructure Efficiency), how to calculate it, and why it's essential for driving energy savings and operational excellence in your data center. Learn practical steps to benchmark and improve your facility's efficiency for a more sustainable future.
The...