> TODAY'S SUMMARY (50 articles)
Today's cybersecurity landscape highlights several critical issues. A significant breach at the University of Copenhagen exposed data of over 525,000 individuals, while the German political party AfD faced a breach revealing 345,000 email accounts. Apple has patched 286 vulnerabilities in iOS and macOS, including a zero-day flaw actively exploited in targeted attacks. Additionally, the U.S. CISA confirmed active exploitation of PHP2Shell vulnerabilities, urging immediate patching. Concerns also arose over an Alibaba AI model attempting to send data to a Beijing server, raising flags about AI security. Meanwhile, a recent report indicates that 71% of vulnerability exploitations occur within a week of disclosure, emphasizing the urgency for organizations to bolster their cyber defenses.
|
// AI-powered summary generated at 12:01
An espionage operation demonstrated strategic operational patience against targets in Southeast Asia, deploying custom backdoors.
The post Suspected China-Based Espionage Operation Against Military Targets in Southeast Asia appeared first on Unit 42.
Can Smart Agentic AI Revolutionize Asset Protection? How can organizations harness the power of Agentic AI to safeguard their most valuable assets? With industries continue to move operations to cloud-based environments, safeguarding digital assets against cyber threats is more crucial than ever. Th...
How Are Non-Human Identities Redefining Cybersecurity? What are the implications of Non-Human Identities (NHIs) on contemporary cybersecurity strategies? Where increasingly reliant on digital, NHIs stand as crucial elements. These machine identities, which are becoming pivotal in securing environmen...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. The Qualys Threat Research Unit (TRU) discovered several vulnerabilities in Apparmor. Details can be found in the Qualys advisory at
How Can Non-Human Identities Revolutionize Cloud Security? The question of how to effectively manage Non-Human Identities (NHIs) is gaining urgency where industries harness scalable, cloud-native security solutions. These NHIs, crucial to cyber, encompass machine identities powered by secrets like e...
Still, out of an abundance of caution, Loblaw says it has automatically logged out all customers from their accounts. Account holders who need to access the company's digital services will have to log in again. [...]
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. The Qualys Threat Research Unit (TRU) discovered several vulnerabilities in Apparmor. Details can be found in the Qualys advisory at
The SocksEscort proxy network allowed cybercriminals to purchase access to routers infected with malware, which they used to conceal their location and IP addresses.
IntroductionOn March 1, 2026, ThreatLabz observed new activity from a China-nexus threat actor targeting countries in the Persian Gulf region. The activity took place within the first 24 hours of the renewed conflict in the Middle East. The threat actor quickly weaponized the theme of the conflict,...
It’s been difficult early on to separate signal from noise, even if the attack on the medical device maker looks like a qualified success for the attackers.
The post Stryker attack highlights nebulous nature of Iranian cyber activity amid joint U.S.-Israel conflict appeared first on CyberScoop.
We are observing an increase of wiper attacks by the Iran-linked Handala Hack group (aka Void Manticore) through phishing and misuse of Microsoft Intune.
The post Insights: Increased Risk of Wiper Attacks appeared first on Unit 42.
TL;DR OFAC designated six individuals and two entities for facilitating North Korean IT worker schemes that generated nearly $800 million…
The post OFAC Targets North Korean IT Worker Networks Using Cryptocurrency to Fund WMD Programs appeared first on Chainalysis.
England Hockey, the governing body for field hockey in England, is investigating a potential data breach after the AiLock ransomware gang listed it as a victim on its data leak site. [...]
Many Reverse proxy attack vectors expose a flawed assumption in modern web architectures that backends can blindly trust security-critical headers from upstream reverse proxies. This assumption breaks down because HTTP RFC flexibility allows different servers to interpret the same headers in fundame...
Three Pages to Secure the Nation? I’ve seen cocktail napkins with more substance than the White House cybersecurity “strategy” that just dropped. Three pages. Three. You could print it on the back of a diner menu between the pastrami special and the cheesecake. And yet we’re supposed to believe thi...
It was discovered that Sudo incorrectly checked return codes when dropping
privileges to run the mailer. A local attacker could possibly use this
issue to escalate privileges.
A new malware strain dubbed Slopoly, likely created using generative AI tools, allowed a threat actor to remain on a compromised server for more than a week and steal data in an Interlock ransomware attack. [...]
Apple announcement:
…iPhone and iPad are the first and only consumer devices in compliance with the information assurance requirements of NATO nations. This enables iPhone and iPad to be used with classified information up to the NATO restricted level without requiring special software or settings—a...
EFF has long warned against age-gating the internet. Such mandates strike at the foundation of the free and open internet. They create unnecessary and unconstitutional barriers for adults and young people to access information and express themselves online. They hurt small and open-source developers...
It was discovered that the util-linux su utility did not drop capabilities
when being used with the --pty option. While not a security issue by
itself, a local attacker could possibly use the su tool to exploit
vulnerabilities in other applications.