> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical issues and trends. A Ukrainian ransomware affiliate was sentenced to 70 months in prison for targeting hospitals and businesses, underscoring ongoing ransomware threats. The UK government is considering holding software companies liable for cyber breaches, which could reshape accountability in cybersecurity. Additionally, attackers are increasingly exploiting vulnerabilities in critical infrastructure, notably a 16-year-old UEFI flaw and a newly patched Oracle vulnerability. A significant data breach at Sony's internet provider exposed 2.6 million customer records, while the FBI continues to target "bulletproof" hosting services involved in criminal activities. Lastly, the rise of AI in security operations is prompting both optimism and caution as organizations adapt to new threats, including those involving fake apps that spread malware.
|
// AI-powered summary generated at 16:00
A summary of the announcements made by vendors in the days leading up to the RSAC 2026 Conference.
The post RSAC 2026 Conference Announcements Summary (Pre-Event) appeared first on SecurityWeek.
A financially motivated data theft and extortion group is attempting to inject itself into the Iran war, unleashing a worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran's time zone or have Farsi set as the default language.
Mandiant’s M-Trends 2026 report, released today at the RSA Conference, shows that attackers are moving faster, operating more collaboratively, and increasingly focusing on the systems organizations rely on to recover from breaches.
The report, based on more than 500,000 hou...
Think you’re downloading from Google or Apple? 1,500+ fake app store sites look like the real thing, but push unvetted, cloned web-based casino apps.
Cyber Risk in Wartime: What Leaders Need to Know Now As geopolitical tensions rise, cyber risk is no longer a theoretical concern; it’s a board-level issue demanding immediate attention. In
Read More
The post Webinar Recap: Cyber Risk in Wartime – Threat Intelligence, Risk Modeling, and Insurance St...
High tech was the most frequently targeted industry in Mandiant investigations in 2025, overtaking financial services which led in 2023 and 2024
L'Autorité nationale de surveillance du traitement des données à caractère personnel (ANSPDCP) a publié une décision de sanction à l'encontre de ING Bank NV Amsterdam – Succursale de Bucarest S.A. (comprenant le prononcé d'une amende de 20 388 lei, soit 4 000 €) pour des manquements en lien avec la...
RSAC 2026: SecurityScorecard is using RSA Conference week to roll out TITAN AI, a set of capabilities aimed at taking manual work out of third-party risk management (TPRM) and tying vendor oversight more directly to threat intelligence. The company says TITAN AI sits on top of its existing Ratings a...
A semiconductor testing company warned regulators that its subsidiary in Singapore suffered a ransomware attack earlier this month.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre d'une personne physique (comprenant le prononcé d'une amende de 500 €) pour des manquements en lien avec l'accès non autorisé à des données personnelles. Cette affaire débute par une plainte déposée co...
Ransomware groups now steal trade secrets before encryption. Nike's 1.4TB theft included shoe designs, patents, supplier lists—IP worth billions.
The post Nike’s 1.4TB IP Theft: When Ransomware Targets Trade Secrets Instead of Files appeared first on Security Boulevard.
L'autorité espagnole de protection des données (AEPD) a publié une décision à l'encontre de la Mairie de Madrid pour des manquements liés à la confidentialité, la sécurité du traitement et la protection des données dès la conception. Cette affaire débute par une plainte déposée le 11 juin 2024, sign...
L'Autorité de protection des données néerlandaise (AP) a publié un guide pratique concernant le traitement des données de santé dans le nuage.Ce guide actualise et élargit une précédente publication, en couvrant désormais un champ plus vaste que les seules données de patients. Il inclut les données...
Fans aren't the only ones who show up for March Madness. Here's how to spot all the different scams that turn up to major sporting events.
Le Comité européen de la protection des données (EDPB) et le Contrôleur européen de la protection des données (EDPS) ont émis un avis conjoint sur les propositions de révision du règlement sur la cybersécurité (CSA2) et les modifications de la directive sur la sécurité des réseaux et de l'informatio...
Hackers working for Iran’s government are using Telegram in hacking operations that use malware to target dissidents, opposition groups, and journalists who oppose its regime, according to the FBI.
Enterprises are moving toward post-quantum security at uneven speeds, and the gap between organizations that have built crypto-agility into their infrastructure and those that have adopted the label without the underlying capability is widening. Dr. Tan Teik Guan, CEO of Singapore-based cybersecurit...
Claims it can analyze millions of daily events with 98 percent accuracy Google's Gemini AI agents are crawling the dark web, sifting through upward of 10 million posts a day to find a handful of threats relevant to a particular organization.…
New Trivy Docker images 0.69.5 and 0.69.6 compromised with TeamPCP infostealer, impacting CI/CD scans
The latest M-Trends report is based on insights from over 500,000 hours of Mandiant incident response investigations in 2025.
The post M-Trends 2026: Initial Access Handoff Shrinks From Hours to 22 Seconds appeared first on SecurityWeek.