> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
In the SOC of the future, autonomous defense moves at machine speed, agents add context and coordination, and humans focus on judgment, risk, and outcomes.
The post The agentic SOC—Rethinking SecOps for the next decade appeared first on Microsoft Security Blog.
What is 2FA?
Two-factor authentication (2FA) offers a second layer of security to help protect an account from brute force, phishing, and social engineering attacks.
2FA requires an extra step for a user to prove their identity, which reduces the chance of a bad actor gaining access to their account...
If you're running Sonatype Nexus Repository or Sonatype Nexus Repository Community Edition (formerly known as Nexus Repository OSS) on OrientDB, you're operating on a legacy database architecture that is no longer aligned with current security and platform requirements.
The post Modernizing Ne...
Google’s accelerated post-quantum encryption deadline has spurred other leaders in the industry, including Cloudflare, to consider pushing forward their own plans.
The US National Institute of Standards and Technology (NIST) has set a 2030 deadline for depreciating legacy e...
Google has rolled out Device Bound Session Credentials (DBSC) protection in Chrome 146 for Windows, designed to block info-stealing malware from harvesting session cookies. [...]
Proton s'enrichit avec un nouvel outil de planification de rendez-vous directement au sein de Proton Calendar, sous la forme d'un équivalent à Calendly.
Le post Oubliez Calendly : Proton lance son outil de prise de rendez-vous ! a été publié sur IT-Connect.
The post Mythos: Just One Piece of the Cybersecurity Puzzle appeared first on Security Boulevard.
Cops bust latest scam, return $12m to bilked victims US, UK, and Canadian law enforcement Thursday said that they disrupted a $45 million global cryptocurrency scam, freezing $12 million in stolen funds and identifying more than 20,000 cryptocurrency wallet addresses linked to fraud victims across 3...
Last week, there were disclosed in that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intelligence...
Bill discusses why obsessing over strategy games is actually a secret weapon to outsmart threat actors.
USN-8155-1 fixed vulnerabilities in OpenSSL. This update provides the
corresponding updates for openssl and openssl1.0 packages for Ubuntu 14.04
LTS, Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS.
Original advisory details:
Viktor Dukhovni discovered that OpenSSL incorrectly negotiated...
USN-8154-1 fixed vulnerabilities in Django. This update provides the
corresponding updates for Ubuntu 14.04 LTS and Ubuntu 16.04 LTS.
Original advisory details:
Seokchan Yoon discovered that Django incorrectly handled copying memory
when parsing multipart uploads with excessive whitespace. A rem...
Details have emerged about a now-patched security vulnerability in a widely used third-party Android software development kit (SDK) called EngageLab SDK that could have put millions of cryptocurrency wallet users at risk.
"This flaw allows apps on the same device to bypass Android security sandbox a...
Eligible U.S. digital asset firms and industry organizations “that meet Treasury’s criteria” will be able to receive, at no cost, the same actionable cybersecurity information Treasury regularly shares with traditional U.S. financial institutions.
As long as people have had more than one purchasing option, they’ve been comparing those options and looking for bargains. Online shoppers are no exception; in fact, one of the potential benefits of the internet is that it expands our options for everything from car rentals to airline tickets to dis...
L'autorité de protection des données de Lettonie, l'Inspection d'État des données (DVI), a publié des clarifications sur les exigences de maintien de la qualification pour les délégués à la protection des données (DPD) inscrits sur sa liste officielle.Pour conserver leur inscription sur cette liste,...
L'Autorité des Données Personnelles (AP) néerlandaise a publié une étude thématique sur l'utilisation par les municipalités de véhicules équipés de systèmes de balayage pour le contrôle du stationnement, révélant l'émission de centaines de milliers d'amendes injustifiées.L'étude estime que sur 3 à 5...
Possible link to Mr. Raccoon's claimed Adobe break-in A new extortion crew has targeted “several dozen high-value” corporations through phishing and helpdesk social-engineering, according to Google.…
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de KVIKU SPAIN, S.L. (comprenant le prononcé d'une amende de 5 000 €) pour des manquements en lien avec la licéité du traitement de données personnelles. Cette affaire débute par une plainte d'une pers...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de EMPRENDEDORES ONLINE, LLC, comprenant le prononcé d'une amende de 10 000 €, pour des manquements en lien avec la sécurité des données et la base légale du traitement. Cette affaire débute par cinq...