> TODAY'S SUMMARY (4 articles)
Today's cybersecurity landscape highlights significant threats and trends. A major cyber incident has forced the University of New Mexico Health System to divert patients and close over 30 clinics, underscoring the vulnerability of healthcare systems. In Japan, a virtual desktop cloud service used for forex trading was severely compromised, revealing the consequences of delayed security measures. Meanwhile, experts are downplaying alarm over a critical defect in the Brotli compression library, noting that while the issue is serious, no active exploitation has been reported. Overall, the focus remains on the urgency of addressing vulnerabilities in critical sectors and the importance of timely security updates.
|
// AI-powered summary generated at 04:00
La Cour administrative suprême polonaise a confirmé une décision de l'autorité polonaise de protection des données (UODO) à l'encontre de la banque Santander Bank Polska S.A. pour un manquement lié à la notification d'une violation de données personnelles. Cette affaire débute par la notification de...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre d'Acea Energia spa, comprenant le prononcé d'une amende de 2 000 000 €, pour des manquements liés au traitement des données personnelles de plus de 1 200 clients dans le cadre de la fourniture d'éner...
OpenAI’s latest acquisition addresses a security need Jamieson O’Reilly, security advisor at OpenClaw, raised during an exclusive interview with Infosecurity
Michael Randrianantenaina discovered that GIMP incorrectly handled certain
malformed ICO files. An attacker could possibly use this to cause a denial
of service or execute arbitrary code. (CVE-2025-5473)
Seungho Kim discovered that GIMP incorrectly handled certain memory
operations when running the...
Organizations often prioritize patching vulnerabilities based on severity scores, assuming that lower-rated issues pose limited risk. In practice, attackers frequently exploit vulnerabilities that remain unpatched in real environments, regardless of their official severity rating. New reporting from...
Critical infrastructure organizations continue to face sustained pressure from nation-state cyber operations. Airports, financial institutions, and software companies represent high-value targets because of the operational and economic disruption that a successful intrusion can create. New reporting...
Key Points Iran-linked actors are increasingly engaging with the cyber crime ecosystem. Their activity suggests a growing reliance on criminal tools, services, and operational models in support of state objectives. Iranian actors have long used cyber crime and hacktivism as cover for destructive act...
Rudd, who was confirmed 71-29 to serve as the “dual-hat” leader of the organizations, takes the reins as the U.S. faces mounting aggression in cyberspace from foreign adversaries at the same time the Trump administration has sought to shrink the size of the federal government.
Several security issues were fixed in the Linux kernel.
On February 4th, 2026, we received a submission for an SQL Injection vulnerability in Ally, a WordPress plugin estimated to have more than 400,000 active installations. This vulnerability can be leveraged to extract sensitive data from the database, such as password hashes.
The post 400,000 WordPres...
Rapid7 says crims broke into more than 250 sites globally, including a US Senate candidate’s campaign page Cyber baddies quietly compromised legitimate WordPress websites, including the campaign site of a US Senate candidate, turning them into launchpads for a global infostealer operation.…
Several security issues were fixed in the Linux kernel.
Cybersecurity researchers are calling attention to a new campaign where threat actors are abusing FortiGate Next-Generation Firewall (NGFW) appliances as entry points to breach victim networks.Â
The activity involves the exploitation of recently disclosed security vulnerabilities or weak credentials...
Only 24% of organizations test identity disaster recovery plans every 6 months, Quest Software said
Cybersecurity researchers have discovered a new malware called KadNap that's primarily targeting Asus routers to enlist them into a botnet for proxying malicious traffic.
The malware, first detected in the wild in August 2025, has expanded to over 14,000 infected devices, with more than 60% of victi...
Elon Musk's social media site says it suspended 800 million accounts in a year for spam and manipulation - but with state-backed campaigns still flooding the platform, the real question is how many fake accounts remain.
Read more in my article on the Hot for Security blog.
For B2B SaaS companies, Zero Trust isn't an optional enterprise security concept. It's what enterprise buyers are demanding, what audit frameworks require, and increasingly what separates companies that close deals from those that don't.
The post Zero Trust for B2B SaaS: What Every Founder and CTO N...
OpenAI has snapped up Promptfoo, a specialized artificial intelligence (AI) security startup, to bolster the safety of autonomous digital workers and convince enterprise clients that AI co-workers are ready for high-stakes business environments. OpenAI did not disclose financial terms of the transa...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- GPU drivers;
- MMC subsystem;
(CVE-2022-49267, CVE-2025-21780)
Managed service providers (MSPs) bridge the gap between what the cloud makes possible and what most organizations can realistically run, secure, and scale with their current teams. MSPs turn AWS capabilities into reliable services that drive customer value instead of sitting unused on a roadma...