> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape reveals several critical threats and trends. A new free vulnerability database for maritime systems has been launched, indexing nearly 30,000 vulnerabilities, highlighting ongoing concerns in the maritime sector. In Ukraine, attackers exploited weaknesses in Dahua IP cameras, emphasizing the risks associated with remote surveillance systems. A significant vulnerability in Microsoft Authenticator for Android has been identified, allowing rogue apps to hijack work accounts. Rapid7's report indicates that 71% of vulnerability exploits occur within a week of disclosure, stressing the urgency for organizations to patch flaws quickly. Additionally, the University of New Mexico Health System faced a major cyber incident that forced patient diversions and clinic closures, underscoring the real-world impact of cyber threats.
|
// AI-powered summary generated at 08:00
Join Cellebrite on March 18 to explore key trends shaping digital forensics and digital evidence in public safety.
Meta said it removed 159 million scam ads last year amid calls from U.S. lawmakers for an investigation into the company’s “facilitation of and profiting from” fraudulent advertising.
Anthropic has established the Anthropic Institute, a research unit focused on studying the societal effects of AI and informing policy responses to risks from more advanced systems. “In the five years since Anthropic began, AI progress has moved incredibly quickly. It took us two years to release ou...
17-year-old allegedly withdrew large sums of cash from ATMs Dutch police have arrested a 17-year-old boy who detectives suspect was responsible for 16 bank card frauds across the Netherlands.…
Zhicheng Chen discovered that curl could incorrectly reuse the wrong
connection for Negotiate-authenticated HTTP or HTTPS requests. This could
result in the use of credentials from a different connection, contrary to
expectations. (CVE-2026-1965)
It was discovered that curl incorrectly leaked OAuth...
The bugs could lead to arbitrary code execution, privilege escalation, or authentication rate-limit bypass.
The post Fortinet, Ivanti, Intel Patch High-Severity Vulnerabilities appeared first on SecurityWeek.
Meta removed 10.9 million Facebook and Instagram accounts linked to “criminal scam centers” last year, the company announced on Wednesday.
The evolution of vulnerability management in the agentic era is characterized by continuous telemetry, contextual prioritization and the ultimate goal of agentic remediation.
The post How to 10x Your Vulnerability Management Program in the Agentic Era appeared first on SecurityWeek.
AI systems are no longer just isolated models responding to human prompts. In modern production environments, they are increasingly chained together – delegating tasks, calling tools, and coordinating decisions with limited or no human oversight. Almost all that communication happens through APIs. ...
Salesforce is urging its customers to review their Experience Cloud ‘guest’ configurations as cybercrime group ShinyHunters claims a new campaign involving data theft and extortion tied to exposed Salesforce environments.
The group recently posted screenshots on its leak si...
AI-driven and “legitimate” bots now make up a growing share of web traffic, blurring the line between value and risk. Security teams must treat bot traffic as a governance, cost, and cyber supply chain issue, guided by long-term visibility and analytics.
The post Monitoring Legitimate Bot Traffic i...
“You knew, and you could have acted. Why didn’t you?”
This is the question you do not want to be asked. And increasingly, it’s the question leaders are forced to answer after an incident.
For years, many executive teams and boards have treated a large vulnerability backlog as an uncomfortable but t...
Advocate General urges rethink of PSD2 to speed compensation after scams Analysis One of the European Union's top legal advisors is trying to change how banks treat cybercrime victims – meaning they could enjoy greater financial protections sooner than expected.…
Hewlett Packard Enterprise (HPE) fixed several flaws in Aruba AOS-CX, including a critical bug that lets attackers reset admin passwords. Hewlett Packard Enterprise (HPE) patched multiple vulnerabilities in Aruba AOS-CX, the operating system used in Aruba CX switches. The most severe issue, tracked...
The cybercriminals have leaked more than 300GB of files allegedly stolen from the tire giant.
The post Michelin Confirms Data Breach Linked to Oracle EBS Attack appeared first on SecurityWeek.
India software development outsourcing in 2026 is no longer about labor arbitrage. It is about capability density, AI engineering depth, digital product velocity, and the...Read More
The post What Makes India a Preferred Destination for Software Development, Innovation, and AI in 2026? appeared firs...
How to protect yourself from the BeatBanker Android trojan, which steals cryptocurrency, hijacks your hardware for crypto mining, and swipes all your data.
Eavesdropping attacks can be levied at individuals and businesses, but how do they work? We explain how to protect against them
Fraude sentimentale et attaques BEC : un réseau criminel vole plus de 100 millions de dollars à des victimes américaines.
Canada has a choice to make about its artificial intelligence future. The Carney administration is investing $2-billion over five years in its Sovereign AI Compute Strategy. Will any value generated by “sovereign AI” be captured in Canada, making a difference in the lives of Canadians, or is this ju...