> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several critical threats and trends. A new free vulnerability database for maritime systems has been launched, indexing nearly 30,000 vulnerabilities, highlighting ongoing concerns in the maritime sector. In Ukraine, attackers exploited weaknesses in Dahua IP cameras, emphasizing the risks associated with remote surveillance systems. A significant vulnerability in Microsoft Authenticator for Android has been identified, allowing rogue apps to hijack work accounts. Rapid7's report indicates that 71% of vulnerability exploits occur within a week of disclosure, stressing the urgency for organizations to patch flaws quickly. Additionally, the University of New Mexico Health System faced a major cyber incident that forced patient diversions and clinic closures, underscoring the real-world impact of cyber threats.
|
// AI-powered summary generated at 08:00
In this Help Net Security interview, Ejona Preçi, Group CISO at Lindal Group, discusses the specific cybersecurity challenges in manufacturing environments. The conversation covers why standard IT security practices break down on shop floors, where PLCs and decade-old firmware were never designed to...
Mithilfe sogenannter Zombie-ZIPs lassen sich fast alle Virenscanner austricksen.
Pressmaster | shutterstock.com
Eine neue Technik mit dem Namen „Zombie ZIP“ ist in der Lage, Payloads in komprimierten Dateien zu verbergen. Sicherheitslösungen wie Antiviren- und EDR-Produkte...
5 min readSPIFFE focuses on who a workload is. It issues cryptographic identities to services and workloads so they can prove their authenticity to each other without relying on stored secrets. OAuth focuses on what a workload is allowed to do. It defines how access is delegated and controlled whe...
Cybercriminals spent much of 2025 automating their operations, shifting from one-off attacks to systems that can run entire intrusion cycles with minimal human input. Data collected from criminal forums, illicit marketplaces, and underground chat services shows a threat environment where stolen iden...
Meta a finalisé l'acquisition de Moltbook, un réseau social dans le style de Reddit qui présente une particularité : il est réservé aux agents IA.
Le post Meta met la main sur Moltbook, le réseau social des agents IA a été publié sur IT-Connect.
The cybersecurity industry runs on trust. The belief that when a vendor says they will behave a certain way, they will, that critical CVEs are in fact critical, or when companies say they’re GDPR compliant, they really are. But earning trust is not a one-and-done thing. Anthropic understood this bet...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical security flaw impacting n8n to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.
The vulnerability, tracked as CVE-2025-68613 (CVSS score: 9.9), concerns a case o...
It was discovered that FreeType did not correctly handle certain integer
arithmetic. An attacker could possibly use this issue to leak sensitive
information.
SafeNet Trusted Access is Now Available on Google Cloud Marketplace
madhav
Thu, 03/12/2026 - 05:10
We’re excited to share that Thales SafeNet Trusted Access, the industry’s leading passwordless authentication and access management solution is now available on Google Cloud Marketplace. Our growing...
Wireless vulnerabilities are being disclosed at a rate that has no precedent in the fifteen-year history of systematic tracking. In 2025, researchers published 937 new wireless-related CVEs, an average of 2.5 per day, according to a threat report from Bastille Networks based on data from the NIST Na...
Blocking bots isn’t enough anymore. Cloudflare’s new fraud prevention capabilities — now available in Early Access — help stop account abuse before it starts.
Iranian nation-state group Handala claims it attacked U.S. medical tech giant Stryker, erasing the data from 200,000 corporate servers and mobile devices and stealing 50 TB of data in retaliation for a missile strike on the first day of the U.S. and Israeli bombing campaign against Tehran that kill...
Bell Ambulance confirms a February 2025 breach affecting 238,000 people, exposing personal, financial, and health information. Nearly 238,000 individuals are impacted by a February 2025 Bell Ambulance data breach. Bell Ambulance is a U.S.-based emergency medical services provider offering ambulance...
Drum prüfe…Ground Picture | shutterstock.com
Security-Anbietern stehen viele Wege offen, um CISOs und Sicherheitsentscheider mit Lobpreisungen und Angeboten zu ihren jeweils aktuellen Produkten und Lösungen zu penetrieren. Und die nutzen sie auch: Manche Sicherheitsverantwor...
Like deleting data, exposing keys, and loading malicious content, perhaps leading to government ban China’s National Computer Network Emergency Response Technical Team has warned locals that the OpenClaw agentic AI tool poses significant security risks.…
[This is a Guest Diary by Adam Thorman, an ISC intern as part of the SANS.edu BACS program]
A Wikipedia security engineer accidentally wakes a dormant JavaScript worm that hadn't stirred since 2024 - and within minutes, giant woodpecker images are plastered across the internet's favourite encyclopaedia.
Meanwhile, a crypto contractor hired to help the US Marshals manage seized digital a...
Learn how to secure MCP node clusters using post-quantum decentralized policy enforcement points. Protect AI infrastructure from quantum threats and tool poisoning.
The post Post-Quantum Decentralized Policy Enforcement Points in MCP Node Clusters appeared first on Security Boulevard.