> TODAY'S SUMMARY (4 articles)
Today's cybersecurity landscape highlights significant threats and trends. A major cyber incident has forced the University of New Mexico Health System to divert patients and close over 30 clinics, underscoring the vulnerability of healthcare systems. In Japan, a virtual desktop cloud service used for forex trading was severely compromised, revealing the consequences of delayed security measures. Meanwhile, experts are downplaying alarm over a critical defect in the Brotli compression library, noting that while the issue is serious, no active exploitation has been reported. Overall, the focus remains on the urgency of addressing vulnerabilities in critical sectors and the importance of timely security updates.
|
// AI-powered summary generated at 04:00
Microsoft is rolling out passkey support for Microsoft Entra on Windows devices, adding phishing-resistant passwordless authentication via Windows Hello. [...]
Delivery apps are glitching and navigation routes are changing abruptly thanks to electronic warfare disrupting the satellite signals that power everything from missiles to your ride home.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- SMB network file system;
(CVE-2025-22037, CVE-2025-37899)
APT28 used BEARDSHELL and COVENANT malware to spy on Ukrainian military personnel, enabling long-term surveillance since April 2024. The Russia-linked group APT28 (aka UAC-0001, aka Fancy Bear, Pawn Storm, Sofacy Group, Sednit, BlueDelta, and STRONTIUM) has used BEARDSHELL and COVENANT malware to co...
The company was created by a Claroty founder and is backed by Evolution Equity Partners, N47, and other investors.Â
The post Kai Emerges From Stealth With $125M in Funding for AI Platform Bridging IT and OT Security appeared first on SecurityWeek.
Fortinet has announced major innovations across the Fortinet Security Operations (SecOps) Platform. The updates feature next-generation SecOps advancements, including expanded agentic AI capabilities, a preview of FortiSOC, managed services, and endpoint security enhancements delivered through Forti...
Join the webinar as we examine the current OT threat landscape and move past the "doom and gloom" to discuss the mechanics of modern OT exposure.
The post Webinar Today: Securing Fragile OT in an Exposed World appeared first on SecurityWeek.
A newly discovered botnet malware called KadNap is targeting ASUS routers and other edge networking devices to turn them into proxies for malicious traffic. [...]
Author, Creator & Presenter: Lea Kissner, LinkedIn
Our thanks to USENIX Security '25 (Enigma Track) (USENIX '25 for publishing their Creators, Authors and Presenter’s tremendous USENIX Security '25 (Enigma Track) content on the Organizations' YouTube Channel.
Permalink
The post USENIX Security...
Ericsson data breach affects 15k employees/customers after third-party service provider compromise
Mend.io has launched System Prompt Hardening within Mend AI to detect, score, and automatically remediate weaknesses in AI system prompts. Hidden instructions in system prompts have emerged as a growing security concern that traditional AppSec tools do not fully address. System Prompt Hardening prov...
After talking with many customers, one thing is clear: the security challenge has not gotten easier. Enterprises today operate across a complex mix of environments, including on-premises infrastructure, private data centers, and multiple clouds, often with tools that were never designed to work toge...
Scammers are impersonating local municipal officials around the country with seemingly legitimate phishing messages demanding payment for permits. The bad actors grab publicly available information and use them in their emails to fool their targets.
The post Phishing Scammers Impersonating City, Co...
Meta’s Advanced browsing protection (ABP) helps Messenger identify and warn users about potentially harmful websites they open from a chat. Malicious sites can try to steal passwords, collect personal information, or install malware. Advanced browsing protection (Source: Meta) “In its standard setti...
A code injection bug in FS-QUO and an insecure deserialization flaw in NetWeaver could lead to arbitrary code execution.
The post SAP Patches Critical FS-QUO, NetWeaver Vulnerabilities appeared first on SecurityWeek.
The telecommunications equipment and services giant has blamed the incident on a third-party vendor.
The post Thousands Affected by Ericsson Data Breach appeared first on SecurityWeek.
Look who's back! After we completed 2024, XSS managed to get itself ranked as the #1 top threat of the year. I wrote about that, and at the end of the blog post I said "Let's make sure that XSS isn't #1 in
In Part 1 of this series, we established the core problem facing cybersecurity today: it still operates as an open-loop system. Tools detect alerts, behaviors, and anomalies, but they do not enforce whether systems remain in a known-good, trusted state. As a result, security teams are perpetua...
Cyberespionage remains the country’s most significant digital threat, with attackers targeting government systems, research institutions and companies developing advanced technologies, according to a new intel report.