> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape highlights significant threats and vulnerabilities. Check Point has linked a suspected Chinese malware supplier to multiple hacking campaigns utilizing a shared malware framework. Meanwhile, critical flaws in Xen Orchestra have been exploited, allowing attackers to execute arbitrary code with admin privileges. Microsoftâs November Patch Tuesday addressed over 1,200 vulnerabilities, including a zero-day in Outlook that could leak NTLM hashes. Additionally, hackers are targeting Qlik Sense servers and exploiting vulnerabilities in Cisco BroadWorks and Openwave. Lastly, the rise of AI-enhanced impersonation fraud continues to pose challenges, with three arrests reported in connection to these schemes. Organizations are urged to prioritize patch management and enhance their security posture against evolving threats.
|
// AI-powered summary generated at 16:00
The Kill Chain models how an attack succeeds. The Attack Helix models how the offensive baseline improves. Tipping Points One person. Two AI subscriptions. Ten government agencies. 150 gigabytes of sovereign data. In December 2025, a single unidentified operator used Anthropicâs Claude and OpenAIâs...
La solution Fortinet FortiClient EMS est concernée par la CVE-2026-35616, une faille de sécurité déjà exploitée en tant que zero-day. Un patch est disponible.
Le post CVE-2026-35616 : déjà exploitée, cette faille Fortinet a été patchée en urgence ! a été publié sur IT-Connect.
DPRK-linked hackers use GitHub C2s, starting attacks via phishing LNK files that drop a PDF and PowerShell script in South Korea. North Korea-linked threat actors target South Korean organizations using GitHub as C2 servers. The attack chain starts with phishing emails carrying obfuscated LNK files...
Microsoft, Google, Meta and Snapchat released a statement on Friday saying they âreaffirm their continued commitment to protecting children and preserving privacy, and will continue to take voluntary actionâ to complete the scans.
Exploit code has been released for an unpatched Windows privilege escalation flaw reported privately to Microsoft, allowing attackers to gain SYSTEM or elevated administrator permissions. [...]
Microsoft has resolved a known issue that was preventing some Classic Outlook users from sending emails via Outlook.com. [...]
Mike Masnick points out that the recent New Mexico court ruling against Meta has some bad implications for end-to-end encryption, and security in general:
If the âdesign choices create liabilityâ framework seems worrying in the abstract, the New Mexico case provides a concrete example of where it l...
Several security issues were fixed in the Linux kernel.
MITRE ATT&CK v19: What the Defense Evasion Split Means for Your SOC Whatâs Changing in ATT&CK v19 MITRE ATT&CK v19 drops April 28, 2026. The biggest change: Defense Evasion (TA0005), the frameworkâs most bloated tactic, is being split into two new tactics with distinct operational meanin...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Author, Creator & Presenter: Brendan Dolan-Gavitt, AI Researcher, XBOW & Vincent Olesen, AI Researcher, XBOW
Our thanks to [un]prompted for publishing their Creators, Authors and Presenterâs outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations') YouTube Channe...
An Iran-nexus threat actor is suspected to be behind a password-spraying campaign targeting Microsoft 365 environments in Israel and the U.A.E. amid ongoing conflict in the Middle East.
The activity, assessed to be ongoing, was carried out in three distinct attack waves that took place on March 3, M...
The suspects were named as Daniil Shchukin, a 31-year-old Russian national believed to have used the alias UNKN (UNKNOWN), and Anatoly Kravchuk, a 43-year-old Ukraine-born Russian citizen who investigators say worked as a developer for the group.
Nonprofits run out of US Border Patrol stations are also selling other âoperationâ-themed coins that include a phrase popularized by the Proud Boys, potentially in violation of government rules.
CISA added the flaw to KEV after Fortinet confirmed exploitation in the wild Fortinet released an emergency patch over the weekend for a critical FortiClient Enterprise Management Server (EMS) bug believed to be under attack since at least March 31.âŠ
Articles
FireCloud causes some websites to display the wrong language, even with the XFF header included
Warning for macOS Tahoe 26.4 and Rosetta 2 compatibility
WatchGuard Endpoint Security On-Demand Scan Scenarios
Access point 2.4 GHz radio might not use 40 MHz channel width
New Data Retention Pe...
lambdaisland/uri could allow bypassing security checks or redirecting users.
Microsoft has deprecated and removed the Support and Recovery Assistant (SaRA) command-line utility from all in-support versions of Windows updates starting March 10. [...]
IT security teams today must have the feeling of a target on their back. It is not paranoia. Hackers target backup storage in nearly every single ransomware incident because they know that if they kill your safety net, you are likely to pay up. I have seen too many smart admins lose sleep wondering...