> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of active exploitation of PHP vulnerabilities, specifically the PHP2Shell flaws, which could enable remote code execution. A significant cyberattack on the University of New Mexico disrupted hospital operations, showcasing the ongoing risks to healthcare systems. In the online retail sector, nearly 1,000 stores were compromised with scanner-evading malware. Furthermore, the rise of AI-generated fake login pages is making phishing more effective, while the recent deepfake incident involving a UK politician underscores the dangers of misinformation and digital impersonation. Lastly, vulnerabilities in major software products, including Microsoft and Citrix, continue to pose substantial risks to organizations.
|
// AI-powered summary generated at 16:00
Personal information such as names, email addresses, and phone numbers was accessed by hackers.
The post Loblaw Data Breach Impacts Customer Information appeared first on SecurityWeek.
When cybersecurity experts from the public and private sectors gathered this week, AI and critical infrastructure took a back seat to frontline defense in light of recent international headlines.
The post New Federal Strategies, Rising Risk From Iran Top Cyber Themes appeared first on Security Boule...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Turning expertise into opportunity for women in cybersecurity Speaker diversity in cybersecurity has been a talking point for over a decade, with panels, pledges, and dedicated conference tracks failing...
In March 2026, the League of Legends custom skins service Divine Skins suffered a data breach. The incident was disclosed via the service's Discord server, where Divine Skins stated that an unauthorised third party accessed part of its systems, deleted all skins from the database and exposed email a...
In March 2026, the Turkish restaurant chain Baydöner suffered a data breach which was subsequently published to a public hacking forum. The incident exposed over 1.2M unique email addresses along with names, phone numbers, cities of residence and plaintext passwords. A small number of records also i...
Cette victime n'a pas été revendiquée par Akira, mais un affidé de l'enseigne divulgue des données qu'il lui attribue.
L'administration communale de Nandrin a été victime d'une cyberattaque de type ransomware en mars dernier. Cette attaque a touché une partie de son infrastructure informatique. Il est signalé que certaines données personnelles de citoyens pourraient avoir été rendues accessibles aux auteurs de l'inc...
Are Your Cloud Security Strategies Providing the Reassurance You Need? Achieving confidence requires more than just traditional measures. Non-Human Identities (NHIs) are a pivotal component of robust cloud security strategies. These machine identities offer an evolved approach to managing cybersecur...
Un hôpital privé majeur dans le district d'Ernakulam a été victime d'une cyberattaque massive ayant entraîné l'exfiltration de plus de 800 Go de données médicales. Les données, incluant des dossiers de patients, des détails de traitements et des comptes rendus de réunions, ont été mises en vente sur...
Sage Water Resources (SWR) a, fournisseur d'infrastructures et de gestion de l'eau appartenant à la tribu amérindienne, a détecté une activité non autorisée sur son système PLC le 15 mars 2026. Une analyse forensique a confirmé qu'il s'agissait d'une manipulation logique malveillante opérée par un a...
Can Machine Identities Be the Key to Greater Security in Healthcare Data Systems? Where data breaches are alarmingly frequent, the role of Non-Human Identities (NHIs) in safeguarding healthcare data systems has garnered increased attention. Understanding and harnessing the power of NHIs can signific...
Des responsables du comté de Lucas, en Ohio, ont signalé un incident de sécurité survenu au milieu de mars 2026 qui a perturbé une partie de leur réseau et mis hors ligne des portails publics clés. Des experts en cybersécurité externes ont été appelés pour enquêter sur l'incident, tandis que le comt...
How Can Non-Human Identities Transform AI Security in Travel? The rapid integration of artificial intelligence (AI) across industries is reshaping how organizations manage security, especially in travel. But how can Non-Human Identities (NHIs) be a game-changer in AI security? With machine identitie...
Microsoft has released an out-of-band (OOB) update to fix a security vulnerabilities affecting Windows 11 Enterprise devices that receive hotpatch updates instead of the regular Patch Tuesday cumulative updates. [...]
I ran an experiment this week that I did not expect to be instructive, and it was.
Related: How ChatGPT is becoming Microsoft Office
The setup was simple. I had been working through a spontaneous personal essay — about cognitive … (more…)
The post MY TAKE: The AI magic is back — whether it endured...
If your organization relies on AWS IAM Identity Center for workforce access, you can now extend that access across multiple AWS Regions with multi-Region replication. Previously, AWS access portal was only available in one Region, when you add an additional Region, users get an active access portal...
Starbucks disclosed a breach after phishing attacks on its employee portal led to unauthorized access to Partner Central accounts, exposing staff data. Starbucks reported a data breach affecting hundreds of employees after phishing attacks targeted its Partner Central employee portal. The security b...
China's National Computer Network Emergency Response Technical Team (CNCERT) has issued a warning about the security stemming from the use of OpenClaw (formerly Clawdbot and Moltbot), an open-source and self-hosted autonomous artificial intelligence (AI) agent.
In a post shared on WeChat, CNCERT not...
This is a current list of where and when I am scheduled to speak:
I’m giving the Ross Anderson Lecture at the University of Cambridge’s Churchill College at 5:30 PM GMT on Thursday, March 19, 2026.
I’m speaking at RSAC 2026 in San Francisco, California, USA, on Wednesday, March 25, 2026.
I’m part o...
Presenter: Stacey Higginbotham, Consumer Reports
Our thanks to USENIX Security '25 (Enigma Track) (USENIX '25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security '25 (Enigma Track) (USENIX '25 content on the Organizations' YouTube Channel.
Permalink
The post USENIX S...