> TODAY'S SUMMARY (12 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Cybercriminals are increasingly using DNS for data exfiltration, prompting organizations to enhance detection and prevention measures. A critical vulnerability (CVE-2026-108142) in Veeam Backup & Replication 13 has been patched, emphasizing the need for timely updates. Similarly, Microsoft Authenticator's AuthMask vulnerability (CVE-2026-80097) allowed unauthorized access to Microsoft 365 accounts, necessitating user vigilance. Meanwhile, a significant number of data breach victims were affected through third-party vendors, underscoring supply chain risks. Additionally, an offensive AI agent, dubbed "Skynet," has been developed to exploit unprotected AI models, marking a worrying trend in cyberattacks. Lastly, NIST is pushing for a transition to post-quantum cryptography, reflecting the urgency of preparing for future threats.
|
// AI-powered summary generated at 08:00
In recent months, Microsoft Threat Intelligence identified email campaigns using lures around W-2, tax forms, or similar themes, or posing as government tax agencies, tax services firms, and relevant financial institutions, with many campaigns targeting individuals for personal and financial data th...
Author, Creator & Presenter: James Pope
Our thanks to BSidesCache for publishing their Creators, Authors and Presenter’s outstanding BSidesCache 2025 content on the Organizations' YouTube Channel.
Permalink
The post BSidesCache 2025 – Oh, The Places Your Packets Will Go! appeared first on Secu...
I recently joined Tim Peacock and Anton Chuvakin on the Google Cloud Security Podcast to talk about SIEM, AI SOC, pricing, federated architecture, detection engineering, and why network telemetry is quietly becoming important again. The short version is simple: SIEM is not dead. Calling it obsolete...
Hackers part of APT28, a state-backed threat group linked to Russia's military intelligence service (GRU), are exploiting a Zimbra Collaboration Suite (ZCS) vulnerability in attacks targeting Ukrainian government entities. [...]
Intezer has expanded capabilities in its AI SOC platform designed for teams who have outgrown their traditional managed detection and response (MDR) services. Internal SOC teams can now focus on supervising outcomes rather than grinding through alerts, with Intezer providing autonomous triage and in...
Russian APT exploits a critical XSS flaw in Zimbra, tracked as CVE-2025-66376, running scripts via HTML emails to target users in Ukraine. Russia-linked threat actor exploits a high-severity XSS vulnerability, tracked as CVE-2025-66376 (CVSS score of 7.2), in Zimbra Collaboration. Attackers exploite...
A powerful iPhone hacking toolkit dubbed “DarkSword” has been used since November 2025 to compromise devices by exploiting zero-day iOS vulnerabilities, Google researchers have shared. iOS vulnerabilities exploited by DarkSword Two weeks ago, Google Threat Intelligence Group (GTIG) and iVerify discl...
A critical Telnet vulnerability with a CVSS rating of 9.8 enables attackers to take full control of affected systems before authentication even kicks in, security researchers at Dream Security have warned.
Tracked as CVE-2026-32746, the vulnerability is in GNU inetutils tel...
Flare has unveiled the general availability of Foretrace, a new business-to-business-to-employee (B2B2E) product that delivers enterprise-grade identity protection directly to employees. Built on the same threat intelligence infrastructure used by security teams to defend their organizations, Foretr...
Mobile banking malware targets over 1200 financial apps globally, shifting fraud to user devices
ThreatsDay Bulletin is back on The Hacker News, and this week feels off in a familiar way. Nothing loud, nothing breaking everything at once. Just a lot of small things that shouldn’t work anymore but still do.
Some of it looks simple, almost sloppy, until you see how well it lands. Other bits feel...
The information was stolen from a marketing tool after an employee fell victim to a targeted phone phishing attack.
The post Security Firm Aura Discloses Data Breach Impacting 900,000 Records appeared first on SecurityWeek.
The U.K.’s media regulator Ofcom fined 4chan £450,000 under the Online Safety Act for failing to introduce age checks to stop children from accessing pornographic content on its platform. 4chan is an online forum notorious for its extreme right-wing content, gory videos, and non-consensual pornograp...
Versa has revealed early access to Versa Secure Enterprise Browser, a new browser-native security capability within the VersaONE Universal SASE Platform that protects employees, contractors, and partner users as they access web, SaaS, and enterprise AI applications by enforcing security, access, and...
President Trump's Cyber Strategy for America makes a few things very clear: the United States must detect adversaries earlier, secure critical infrastructure, strengthen technology supply chains, and ensure that systems can recover rapidly after cyber incidents.Â
These goals appear throughout...
60% of phishing breaches now bypass traditional MFA. Learn how AI-powered adaptive authentication and behavioral biometrics create continuous security without adding friction, with real deployment data and implementation roadmap.
The post AI-Powered Adaptive Authentication and Behavioral Biometrics:...
Nagomi Security has announced the next evolution of its platform with Agentic Exposure Ops, expanding Nagomi from exposure visibility to agent-driven exposure elimination. Most exposure management programs generate findings faster than teams can validate what’s real, route fixes to the right owners,...
Moxie Marlinspike says the technology powering his encrypted AI chatbot, Confer, will be integrated into Meta AI. The move could help protect the AI conversations of millions of people.
The post <b>What Is Data Mapping and Why It Matters for GDPR</b> appeared first on Sovy.
The post What Is Data Mapping and Why It Matters for GDPR appeared first on Security Boulevard.
DarkSword, a new iOS exploit kit, is used by multiple actors to steal data in campaigns targeting Saudi Arabia, Turkey, Malaysia, and Ukraine. Lookout Threat Labs discovered a new iOS exploit kit called DarkSword that has been used since late 2025 by multiple threat actors, including surveillance ve...