> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity landscape highlights several key developments and threats. Michael LoSapio has been nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), a move that may encounter political challenges. SonicWall has issued urgent patches for seven vulnerabilities in its firewalls, with five allowing unauthenticated remote access—an indication of increasing risks to network security. Meanwhile, Microsoft’s email security filters are mistakenly blocking legitimate business communications, raising concerns about the reliability of automated security measures. Lastly, Anthropic's advanced bug-finding tool, Mythos, will be integrated into Cisco and IBM products, enhancing enterprise security capabilities without exposing the underlying model. Overall, these updates reflect ongoing vulnerabilities and the need for robust cybersecurity measures in both enterprise and governmental contexts.
|
// AI-powered summary generated at 04:00
An ongoing phishing campaign is targeting French-speaking corporate environments with fake resumes that lead to the deployment of cryptocurrency miners and information stealers.
"The campaign uses highly obfuscated VBScript files disguised as resume/CV documents, delivered through phishing emails,"...
2 min readThe Trivy incident exposed a credential architecture failure, not just a supply chain one. Here’s the case for workload identity and access.
The post Introducing the Identity and Access Gaps in the Age of Autonomous AI Survey Report appeared first on Aembit.
The post Introducing the Iden...
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
The Federal Communications Commission has banned all consumer routers produced outside of the U.S. from being imported unless their manufacturers obtain an exemption due to what the agency called an “unacceptable risk" to national security.
Understand why passkeys fail on some devices. Explore OS support, browser compatibility, WebAuthn limitations, and practical fixes for implementing passkeys reliably.
The post Why Passkeys Don’t Work on Some Devices: Device-Level Limitations appeared first on Security Boulevard.
Google Chromebooks and Workspace rule US classrooms. Lawsuits claim they collect student data without parental consent. What you should know.
Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage & phishing
A summary of the announcements made by vendors on the first day of the RSAC 2026 Conference.
The post RSAC 2026 Conference Announcements Summary (Day 1) appeared first on SecurityWeek.
Swissbit is using RSAC 2026 to mark a series of real milestones for its iShield Key 2, the hardware security key the company launched last year as the first FIDO device to combine digital and physical access in a single token. The most immediately significant announcement: HID Seos support is now av...
Redis could be made to crash or run programs if it received specially crafted network traffic.
A Federal Register notice seeks public comment on how cyber is covered within a 2002 law and program.
The post Treasury asks whether terrorism risk insurance program should bolster cyber coverage appeared first on CyberScoop.
A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory
The system could be made to run programs as an administrator.
Microsoft has fixed a known issue causing Gmail and Yahoo email synchronization and connection problems for classic Outlook users. [...]
Over 3.1M people affected as QualDerm Partners suffered a December 2025 breach, exposing personal, medical, and health insurance data. Over 3.1 million people are affected by a December 2025 data breach at QualDerm Partners, where hackers stole personal, medical, and health insurance information fro...
The US Federal Communications Commission (FCC) has imposed a ban on all new routers manufactured overseas being imported into and sold within the United States.
The post Uncle Sam closes the door on all new foreign-made routers appeared first on Help Net Security.
LUXEMBOURG, Luxembourg, March 24, 2026, CyberNewswire— Gcore, the global infrastructure and software provider for AI, cloud, network, and security solutions, today announced the findings of its Q3-Q4 2025 Gcore Radar report DDoS attack trends.
The report reveals growing attack … (more…)
The post Ne...
Something that I've come to learn as we continue to grow Report URI is that everything is easy until scale makes it hard. We're now processing so much telemetry that a "one in a billion" problem can happen every, single, day, and we'
This is the second installment of a blog series reflecting on the global digital legacy of the 2011 Arab uprisings.
From Russia—where wartime censorship and more stringent platform controls have choked dissenting voices—to Nigeria, with its aggressive takedown orders turning social media into politi...
The incident responders noted that there was no evidence that data was exfiltrated during the intrusion — an unusual development considering U.S. intelligence agencies previously said Pay2Key attacks were largely conducted for information theft.