> TODAY'S SUMMARY (139 articles)
Today's cybersecurity landscape highlights a series of significant threats and vulnerabilities. A Malaysian national was indicted for involvement in a global scam operation, showcasing the expanding reach of cybercriminal networks. In Italy, a cyberattack on Parliament underscores the rising hybrid warfare risks and the need for robust defenses. AI-driven hacking is increasingly prevalent, with reports of a hacker utilizing AI to discover critical bugs in industrial control software and malicious bots automating attacks against organizations in Japan. Meanwhile, vulnerabilities in PHP and Brotli compression have been actively exploited, prompting urgent patching by organizations. Notably, a ransomware attack forced the University of New Mexico to divert ambulances, emphasizing the critical impact of cyber incidents on healthcare operations. As AI tools become more integrated into cyberattacks, organizations must enhance their security measures to combat these evolving threats.
|
// AI-powered summary generated at 20:00
Single-turn jailbreaks are getting caught. Guardrails have matured. The easy wins — “ignore previous instructions,” base64-encoded payloads, DAN prompts — trigger refusals on most production models within milliseconds. But real attackers don’t give up after one message. They have conversations. Augu...
The GlassWorm malware campaign is being used to fuel an ongoing attack that leverages the stolen GitHub tokens to inject malware into hundreds of Python repositories.
"The attack targets Python projects — including Django apps, ML research code, Streamlit dashboards, and PyPI packages — by appending...
Imagine a newspaper publisher announcing it will no longer allow libraries to keep copies of its paper.Â
That’s effectively what’s begun happening online in the last few months. The Internet Archive—the world’s largest digital library—has preserved newspapers since it went online in the mid-1990s. T...
Last week's cyberattack on medical technology giant Stryker was limited to its internal Microsoft environment and remotely wiped tens of thousands of employee devices. [...]
The evolution of Iranian cyber operations in broad context: from custom wiper malware to misuse of legitimate admin tools and more.
The post Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization appeared first on Unit 42.
Author, Creator & Presenter: Bryson Loughmiller -- Founder, [Petracore](https://petracore.io)
________________________________________________________________
Our thanks to BSidesCache for publishing their Creators, Authors and Presenter’s outstanding BSidesCache 2025 content on the Organization...
Cloudflare is appealing a €14 million fine from Italian regulators over "Piracy Shield," a system that forces providers to block content without oversight. We are challenging this framework to protect the Internet from disproportionate overblocking and lack of due process.
Hacktivists use proxy services from Russia, China for 'billions of designed-for-abuse connection attempts' Cybercrime has skyrocketed since the start of the Iran war, according to Akamai, which reports a 245 percent increase in everything from credential harvesting attempts to automated reconnaissan...
L'Office polonais de protection des données personnelles (UODO) a publié une décision de sanction à l'encontre de la société Restaurant Partner Polska, qui exploite la plateforme Glovo, comprenant le prononcé d'une amende de 5 898 064 PLN (environ 1 371 875 €) pour des manquements en lien avec la co...
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de la structure A.A.A., comprenant le prononcé d'une amende de 1 000 €, pour des manquements en lien avec le principe de minimisation des données. Cette affaire débute par une plainte signalant que la...
Analyse cyber d’un message lié à ShinyHunters et à la fin de BreachForums, entre intimidation, propagande et stratégie de réputation dans l’écosystème cybercriminel.
CISA warned U.S. government agencies to secure their Wing FTP Server instances against an actively exploited vulnerability that may be chained in remote code execution attacks. [...]
Poland officials say the cyberattack late last week appears to have been launched by an Iranian threat group, though they noted that bad actors not associated with any country in the war could have been behind it and used tactics associated with Iranian threat groups to cover their own tracks.
The...
The case, which had its roots in 2018, originated in the way that Amazon obtained consent from European consumers.
Zhicheng Chen discovered that curl could incorrectly reuse the wrong
connection for Negotiate-authenticated HTTP or HTTPS requests. This could
result in the use of credentials from a different connection, contrary to
expectations. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-1965)
It was di...
Drivers in the Russian city of Perm have been enjoying an unexpected bonus this week: free parking.
Not because the city council suddenly decided to embrace generosity - but rather because hackers succeeded in knocking the city's payment system offline.
Read more in my article on the Hot for S...
Roundcube Webmail could be made to run arbitrary code via cross-site scripting.
We found fake “verify you are human” pages on hacked WordPress sites that trick Windows users into installing the Vidar infostealer.
Electronic ordering systems belonging to the medical device company Stryker are still down a week after a cyberattack believed to have wiped thousands of company devices of all information. The company said its digital products are safe for use.
As organizations adopt AI, security and governance remain core primitives for safe AI transformation and acceleration.
The post New Microsoft Purview innovations for Fabric to safely accelerate your AI transformation appeared first on Microsoft Security Blog.