> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
AI is rapidly changing how software is written, deployed, and used. Trends point to a future where AIs can write custom software quickly and easily: “instant software.” Taken to an extreme, it might become easier for a user to have an AI write an application on demand—a spreadsheet, for example—and...
Hackers linked to Russia's military intelligence units are using known flaws in older Internet routers to mass harvest authentication tokens from Microsoft Office users, security experts warned today. The spying campaign allowed state-backed Russian hackers to quietly siphon authentication tokens fr...
Hackers are exploiting a maximum-severity vulnerability, tracked as CVE-2025-59528, in the open-source platform Flowise for building custom LLM apps and agentic systems to execute arbitrary code. [...]
200 orgs and 5,000 devices compromised so far in Vlad's latest intelligence grab, Microsoft reckons The UK's National Cyber Security Centre (NCSC) has issued a fresh warning about Russia's ongoing targeting of routers to steal passwords and other secrets.…
Fancy Bear, also known as APT28, has taken over thousands of residential home routers to steal passwords and authentication tokens in a wide-ranging espionage operation.
The Russia-linked threat actor known as APT28 (aka Forest Blizzard) has been linked to a new campaign that has compromised insecure MikroTik and TP-Link routers and modified their settings to turn them into malicious infrastructure under their control as part of a cyber espionage campaign since at l...
AttackIQ has released a new assessment template that emulates the behaviors of RoningLoader, a multi-stage loader observed in recent intrusion campaigns. RoningLoader operates through a layered execution chain, enabling stealthy delivery and execution of follow-on payloads while evading traditional...
The FBI’s annual report on digital crimes exposes a worsening environment. Yet, an unknown number of victims still suffer in the shadows never reporting the crimes they endure.
The post Cybercrime losses jumped 26% to $20.9 billion in 2025 appeared first on CyberScoop.
The cybersecurity response to AI-enabled nation-state threats cannot be incremental. It must be architectural.
The post The New Rules of Engagement: Matching Agentic Attack Speed appeared first on SecurityWeek.
The startup has created a layered security solution aiming to secure AI agents throughout their entire lifecycle.
The post Trent AI Emerges From Stealth With $13 Million in Funding appeared first on SecurityWeek.
The missive, obtained by Recorded Future News, arrives days before policymakers return from recess next week and aim for a quick extension Section 702 of the Foreign Intelligence Surveillance Act (FISA) for another 18 months.
La Commission Nationale de l'Informatique et des Libertés (CNIL) a présenté son programme de travail pour l'année 2026, détaillant les ressources et les chantiers prévus pour accompagner les professionnels dans leur mise en conformité.La CNIL prévoit d'initier des travaux sur le recueil du consentem...
The Russian state cyber group APT28 has been compromising routers to hijack web traffic and spy on victims, the UK’s The National Cyber Security Centre (NCSC) has warned. Attackers are exploiting vulnerable routers to alter DHCP and DNS settings, redirecting traffic through servers they control. “We...
L'autorité britannique de protection des données (ICO) lance une campagne de sensibilisation pour aider les parents à aborder la protection des données personnelles en ligne avec leurs enfants.La campagne, intitulée "Sensibilisés à la vie privée", s'adresse aux parents d'enfants âgés de 4 à 11 ans....
Le président de l'Office de protection des données personnelles (UODO) polonais a sollicité une révision législative auprès des ministres de l'Intérieur et de la Justice, pointant les lacunes de la loi nationale transposant la directive 2016/680, dite « police-justice ».La législation polonaise actu...
Si un Mac reste allumé trop longtemps, il risque de perdre l'accès au réseau après exactement 49 jours, 17 heures, 2 minutes et 47 secondes d'activité.
Le post Votre Mac peut perdre sa connexion Internet après exactement 49 jours a été publié sur IT-Connect.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de la fondation TRILEMA, comprenant le prononcé d'une amende de 3 600 €, pour des manquements liés à la publication d'images d'un mineur sur internet et les réseaux sociaux sans disposer d'une autorisa...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de NAROBESA INV, S.L. comprenant le prononcé d'une amende de 1 000 € pour des manquements en lien avec la consultation illicite d'un fichier de solvabilité patrimoniale dans le cadre d'un processus d...
Signature Healthcare and Signature Healthcare Brockton Hospital said on Monday that the cyber incident is impacting many of their information systems.
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de BANKINTER, S.A., comprenant le prononcé d'une amende de 400 000 €, pour des manquements liés à la sécurité des données personnelles ayant conduit à une violation de données à grande échelle. Cette...