> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape highlights significant threats and vulnerabilities. Check Point has linked a suspected Chinese malware supplier to multiple hacking campaigns utilizing a shared malware framework. Meanwhile, critical flaws in Xen Orchestra have been exploited, allowing attackers to execute arbitrary code with admin privileges. Microsoft’s November Patch Tuesday addressed over 1,200 vulnerabilities, including a zero-day in Outlook that could leak NTLM hashes. Additionally, hackers are targeting Qlik Sense servers and exploiting vulnerabilities in Cisco BroadWorks and Openwave. Lastly, the rise of AI-enhanced impersonation fraud continues to pose challenges, with three arrests reported in connection to these schemes. Organizations are urged to prioritize patch management and enhance their security posture against evolving threats.
|
// AI-powered summary generated at 16:00
Posted by Dirk Göhmann, Tony Mendez, and the Vulnerability Rewards Program Team2025 marked a special year in the history of vulnerability rewards and bug bounty programs at Google: our 15th anniversary 🎉🎉🎉! Originally started in 2010, our vulnerability reward program (VRP) has seen constant addit...
Pondurance announced MDR Essentials, MDR Essentials, an MDR service providing an autonomous SOC that reduces the time from threat detection to containment by 90%. Threat actors today use AI to attack at machine-speed, making it difficult for traditional cybersecurity solutions to accurately detect a...
Faux live GTA, vidéosurveillance, effacement des traces : comment un alibi numérique a conduit un youtubeur à la perpétuité.
Researchers at numerous firms are sounding warnings about the supply-chain attack on an open-source project with 100 million weekly downloads.
The post Attack on axios software developer tool threatens widespread compromises appeared first on CyberScoop.
Adva Lavie, alias Mia Ventura, accusée d’avoir utilisé la confiance en ligne pour voler des victimes.
If you own a WordPress website and ever encountered the “Not Secure” warning, you might have worried that visitors would perceive your site as spam or fraudulent. Not only does this warning impact user trust, but it can also create technical search issues when both HTTP and HTTPS versions of your pa...
AWS Security Agent on-demand penetration testing is now generally available, enabling you to run comprehensive security tests across all your applications, not only your most critical ones. This milestone transforms penetration testing from a periodic bottleneck into an on-demand capability that sca...
Axios Hijacked: npm Account Takeover Deploys Cross-Platform RAT to Millions
The post Axios Hijacked: npm Account Takeover Deploys Cross-Platform RAT to Millions appeared first on Security Boulevard.
Le parlement polonais a adopté, le 27 mars 2026, la loi sur la gouvernance des données visant à transposer le règlement européen sur la gouvernance des données (DGA).Cette loi, qui entrera en vigueur trois mois après sa promulgation, confère au Président de l'Office de protection des données personn...
L'Inspection de la protection des données estonienne (AKI) a publié son rapport annuel 2025, mettant en lumière un nombre record de plaintes et les défis de la protection des données à l'ère numérique.Le rapport souligne une augmentation sans précédent du nombre de plaintes, reflétant une conscience...
A high-severity security flaw in the TrueConf client video conferencing software has been exploited in the wild as a zero-day as part of a campaign targeting government entities in Southeast Asia dubbed TrueChaos.
The vulnerability in question is CVE-2026-3502 (CVSS score: 7.8), a lack of integrity...
L'autorité espagnole de protection des données (AEPD) a publié une décision déclarant la caducité de la procédure de sanction initiée à l'encontre du PARTIDO SOCIALISTA OBRERO ESPAÑOL (PSOE) pour des manquements présumés liés à la réalisation d'une enquête d'opinion par téléphone. Cette affaire débu...
La Commission Nationale de l'Informatique et des Libertés (CNIL) publie, en partenariat avec la Bibliothèque nationale de France (BnF), un rapport sur l'éthique des traces numériques après la mort.Intitulé "Intimité des disparus, mémoire des vivants : quelle éthique pour les traces numériques ?", ce...
A hacker inserted malware in Axios, an open-source web tool downloaded tens of millions of times weekly, in a widespread hack.
Read actionable advice for CISOs on securing AI, managing risk, and applying core security principles in today’s AI‑powered environment.
The post Applying security fundamentals to AI: Practical advice for CISOs appeared first on Microsoft Security Blog.
Amazon’s latest AI capabilities bring on-demand penetration testing through the AWS Security Agent, alongside the AWS DevOps Agent. “These agents are changing the way we secure and operate software. AWS Security Agent compresses penetration testing timelines from 2-6 weeks to 1-2 days. AWS DevOps ag...
The latest funding round brings the total venture capital investment in Censys to $149 million.
The post Censys Raises $70 Million for Internet Intelligence Platform appeared first on SecurityWeek.
Application Maison Blanche : GPS, profilage, scripts tiers, les risques concrets pour vos données et votre vie privée.
Kali Linux 2026.1 modernise le pentest avec nouveaux outils, refonte visuelle et avancées NetHunter.
Introduction Xloader is an information stealing malware family that evolved from Formbook and targets web browsers, email clients, and File Transfer Protocol (FTP) applications. Additionally, Xloader may execute arbitrary commands and download second-stage payloads on an infected system. The author...