> TODAY'S SUMMARY (50 articles)
Today's cybersecurity landscape highlights several critical issues. A significant breach at the University of Copenhagen exposed data of over 525,000 individuals, while the German political party AfD faced a breach revealing 345,000 email accounts. Apple has patched 286 vulnerabilities in iOS and macOS, including a zero-day flaw actively exploited in targeted attacks. Additionally, the U.S. CISA confirmed active exploitation of PHP2Shell vulnerabilities, urging immediate patching. Concerns also arose over an Alibaba AI model attempting to send data to a Beijing server, raising flags about AI security. Meanwhile, a recent report indicates that 71% of vulnerability exploitations occur within a week of disclosure, emphasizing the urgency for organizations to bolster their cyber defenses.
|
// AI-powered summary generated at 12:01
New tools from Semantics 21 help digital investigators surface intelligence faster, assess deepfakes, and generate structured scene descriptions â all offline and alongside existing forensic workflows.
An international law enforcement operation shut down a service called SocksEscort, which allegedly helped cybercriminals all over the world launch ransomware and DDoS attacks, as well as distribute child sexual abuse material.
The Information Commissionerâs Office (ICO) and Ofcom stressed that they expect immediate action, with Ofcom saying that firms have until the end of April to report back on their plans.
The botnet, which compromised routers and IoT devices in 163 countries, claimed about 369,000 victims and $5.8 million from its cybercriminal customers, officials said.
The post Authorities takedown global proxy network SocksEscort appeared first on CyberScoop.
Credentials exposed in breach data can create risk long after the original incident. Once those passwords circulate through underground marketplaces, they can be reused to target enterprise systems and customer accounts. According to the Verizon Data Breach Investigations Report, stolen credentials...
The financial world is awash with data. But too few organizations are able to use it effectively. In Bank Directorâs 2025 Technology Survey, one-third of US banking leaders cite an inability to harness data as a top technology challenge facing their institution. They run the risk of falling be...
Bahruz Jabiyev, Tommaso Innocenti, Anthony Gavazzi, Steven Sprecher, and
Kaan Onarlioglu discovered that servers using Go Networking could hang
during shutdown if preempted by a fatal error. An attacker could possibly
use this to cause a denial of service. This issue only affected Ubuntu
22.04 LTS....
python-cryptography could be made to expose sensitive information over the network.
International cops stuck down 23 servers in 7 countries Cops from eight countries this week disrupted SocksEscort, a residential proxy service used by criminals to compromise hundreds of thousands of routers worldwide and carry out digital fraud, costing businesses and consumers millions.âŠ
Law enforcement agencies in the U.S. and Europe along with private partners have disrupted the SocksEscort cybercrime proxy network that used only edge devices compromised via the AVRecon malware for Linux. [...]
Amid a paralyzing breach of medical tech firm Stryker, the group has come to represent Iran's use of âhacktivismâ as cover for chaotic, retaliatory state-sponsored cyberattacks.
PixRevolution Android trojan hijacks Brazilâs PIX payments in real time using accessibility abuse
The latest Microsoft benchmarking data reveals how Microsoft Defender mitigates modern email threats compared to SEG and ICES vendors.
The post From transparency to action: What the latest Microsoft email security benchmark reveals appeared first on Microsoft Security Blog.
DĂ©mantĂšlement de SocksEscort, rĂ©seau mondial de proxys criminels fondĂ© sur des routeurs piratĂ©s et lâanonymisation de fraudes.
Threat actors are advertising pages featuring malicious instructions for installing AI agents like Claude Code, Doubao, and OpenClaw.
Ionut Lalu discovered that go-git incorrectly handled certain specially
crafted Git server responses. An attacker could possibly use this issue to
cause a denial of service. (CVE-2023-49568, CVE-2025-21614)
Ionut Lalu discovered that go-git incorrectly handled file system paths
when using the Chroo...
Apple released iOS 16.7.15 and 15.8.7 updates for older iPhones and iPads to patch vulnerabilities linked to the Coruna exploits. Apple has released security updates for legacy devices, rolling out iOS and iPadOS 16.7.15 and 15.8.7 to address vulnerabilities tied to the recently disclosed Coruna exp...
The critical vulnerability affecting both cloud and self-hosted n8n instances requires no authentication or even n8n account to be exploited
Cyber officials lamented Wednesday that its a challenge to make the wider population appreciate the gravity of the threat the hacking group presents. Â
The post Officials worry Salt Typhoon apathy is killing momentum for tougher telecom security rules appeared first on CyberScoop.
Google paid over $17 million to 747 security researchers who reported security bugs through its Vulnerability Reward Program (VRP) in 2025. [...]