> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of active exploitation of PHP vulnerabilities, specifically the PHP2Shell flaws, which could enable remote code execution. A significant cyberattack on the University of New Mexico disrupted hospital operations, showcasing the ongoing risks to healthcare systems. In the online retail sector, nearly 1,000 stores were compromised with scanner-evading malware. Furthermore, the rise of AI-generated fake login pages is making phishing more effective, while the recent deepfake incident involving a UK politician underscores the dangers of misinformation and digital impersonation. Lastly, vulnerabilities in major software products, including Microsoft and Citrix, continue to pose substantial risks to organizations.
|
// AI-powered summary generated at 16:00
Are Non-Human Identities the Key to Securing the Financial Sector? One topic gaining notable traction is the management of Non-Human Identities (NHIs). With financial institutions increasingly migrate to cloud-based operations, securing machine identities becomes pivotal. These NHIs—consisting of en...
Are Your Machine Identities Securely Managed? Understanding Non-Human Identities Imagine the complexities involved in managing something that can’t think, act, or even decide on its own. Yet, this is the reality of dealing with Non-Human Identities (NHIs)—machine identities that play a crucial role...
Some good news: squid stocks seem to be recovering in the waters off the Falkland Islands.
As usual, you can also use this squid post to talk about the security stories in the news that I haven’t covered.
Blog moderation policy.
A few months ago, I wrote about the Phishing Renaissance and how AI hasn't invented new attack types so much as perfected the classics. Credential theft, vendor impersonation, executive fraud. Same playbook, exponentially better execution.
The post IRONSCALES Winter ’26 Release: Preemptive Ema...
The FBIÂ is asking gamers who installed Steam titles containing malware to provide information as part of an ongoing investigation into eight malicious games uploaded to the gaming platform. [...]
Threat actors are exploiting two high severity zero day vulnerabilities in the Chrome browser that experts say IT teams must patch immediately.
Google has issued emergency patches for the two holes, CVE-2026-3909 and CVE-2026-3910. This comes just days after the release of...
Hackers targeted Poland’s National Centre for Nuclear Research, but security systems detected and blocked the attack before any damage. The National Centre for Nuclear Research in Poland reported a cyberattack on its IT infrastructure. The intrusion attempt was quickly detected by security systems,...
Artificial intelligence (AI) agents, once touted as the next frontier of corporate efficiency, are increasingly exhibiting deceptive and rogue behaviors that could overwhelm traditional cybersecurity. New research shows autonomous systems are now capable of collaborating to smuggle sensitive data,...
EFF is filing against the Consumer Product Safety Council (CPSC) to ensure that the public has full access to the laws that govern us.
Our client Public.Resource.Org (Public Resource), a tiny non-profit founded by open records advocate Carl Malamud, has a mission that’s both simple and powerful: to...
Everyone knows that one person on the team who’s inexplicably lucky, the one who stumbles upon a random vulnerability seemingly by chance. A few days ago, my coworker Michael Weber was telling me about a friend like this who, on a recent penetration test, pressed the shift key five times at an RDP l...
Presenter: Zach Steindler, GitHub
Our thanks to USENIX Security '25 (Enigma Track) (USENIX '25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security '25 (Enigma Track) (USENIX '25 content on the Organizations' YouTube Channel.
Permalink
The post USENIX Security ’25 (En...
The new rules for water and wastewater entities in New York include mandatory cybersecurity training for certified operators, incident response plans and reporting requirements.
Â
Cyber attackers increasingly target SMBs because they are often the easiest path into larger supply chains. As cyberattacks are ramping up, specifically against Critical Infrastructure sectors, Small and Medium Businesses (SMBs) are feeling the pressure and asking what they can do to better prot...
L'Inspection d'État des Données (DVI) de Lettonie a publié une clarification concernant le droit des parents d'accéder aux copies des travaux d'évaluation de leurs enfants, parfois refusé par les établissements scolaires au nom de la protection des données.Saisie de cette question, l'autorité rappel...
Security solutions have become so complex that many small and lean security teams aren’t looking for another dashboard or additional source of alerts—even when they’re at RSA. Instead, they’re exploring ways to simplify security operations without reducing effectiveness.
The post RSAC 2026: Wh...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié une recommandation visant à encadrer l'usage des serveurs mandataires web filtrants afin d'assurer leur conformité avec le RGPD.Élaborée après une consultation publique menée en 2025, cette recommandation s'adresse aux respons...
L'autorité polonaise de protection des données (UODO) a abordé les défis posés par les nouvelles technologies, notamment les hypertrucages et l'intelligence artificielle, lors d'une série de conférences.Le président de l'UODO a souligné que les hypertrucages constituent une utilisation abusive de do...
A suspected China-based cyber espionage operation has targeted Southeast Asian military organizations as part of a state-sponsored campaign that dates back to at least 2020.
Palo Alto Networks Unit 42 is tracking the threat activity under the moniker CL-STA-1087, where CL refers to cluster, and STA...
L'Autorité suédoise de protection des données (IMY) a initié deux nouveaux projets dans son bac à sable de l'innovation, portant sur la numérisation dans le secteur de la santé et sur la communication mobile directe.Le premier projet, mené par l'Hôpital Södersjukhuset (SöS) à Stockholm, concerne la...
Les mises à jour de mars 2026 sont disponibles. Windows Server 2025 a le droit à la KB5078740, mais il n'y a pas de nouveauté marquante. Voici un résumé.
Le post Le point sur les mises à jour de mars 2026 pour Windows Server a été publié sur IT-Connect.