> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape highlights significant threats and vulnerabilities. Check Point has linked a suspected Chinese malware supplier to multiple hacking campaigns utilizing a shared malware framework. Meanwhile, critical flaws in Xen Orchestra have been exploited, allowing attackers to execute arbitrary code with admin privileges. Microsoft’s November Patch Tuesday addressed over 1,200 vulnerabilities, including a zero-day in Outlook that could leak NTLM hashes. Additionally, hackers are targeting Qlik Sense servers and exploiting vulnerabilities in Cisco BroadWorks and Openwave. Lastly, the rise of AI-enhanced impersonation fraud continues to pose challenges, with three arrests reported in connection to these schemes. Organizations are urged to prioritize patch management and enhance their security posture against evolving threats.
|
// AI-powered summary generated at 16:00
Charles Bennett and Gilles Brassard have won the 2026 Turing Award for inventing quantum cryptography.
I am incredibly pleased to see them get this recognition. I have always thought the technology to be fantastic, even though I think it’s largely unnecessary. I wrote up my thoughts back in 2008, in...
This post is adapted from a talk I gave at [un]prompted, the AI security practitioner conference. Thanks to Gadi Evron for inviting me to speak. You can watch the recorded presentation below or download the slides.
Most companies hand out ChatGPT licenses and wait for the productivity numbers to mov...
Several security issues were fixed in Pillow.
Le Royaume-Uni teste des restrictions familiales sur les réseaux sociaux avant une possible régulation pour les adolescents.
Condamnation d'un opérateur russe de botnet lié au ransomware, au cœur de la chaîne d’accès cybercriminelle.
Hijacked maintainer account let attackers slip cross-platform trojan into 100M-downloads-a-week Axios One of npm's most widely used HTTP client libraries briefly became a malware delivery vehicle after attackers hijacked a maintainer's account and slipped a remote-access trojan (RAT) into two seemin...
Vulnerability attacks rose 56% in 2025. Explore 46 statistics on CVE disclosure, exploitation patterns, and industry impact to guide your 2026 security strategy.
The post 46 Vulnerability Statistics 2026: Key Trends in Discovery, Exploitation, and Risk appeared first on Indusface.
The post 46 Vulner...
Remotely exploitable, the integer underflow vulnerability impacts StrongSwan releases spanning 15 years.
The post StrongSwan Flaw Allows Unauthenticated Attackers to Crash VPNs appeared first on SecurityWeek.
LiteLLM compromis : une attaque supply chain IA menace secrets cloud, accès API et sécurité des entreprises.
Intel engineers have published a centralized repository of data center performance knowledge on GitHub, giving practitioners direct access to tuning guides, configuration recommendations, and optimization recipes that previously required hunting across forums and scattered documentation. The reposit...
Au Royaume-Uni, Apple impose une vérification d’âge sur iPhone pour limiter l’accès des mineurs à certains contenus.
A faulty software update led to the exposure of mobile banking users’ transactions to other users of the application.
The post Lloyds Data Security Incident Impacts 450,000 Individuals appeared first on SecurityWeek.
Analysis from law firm Nockolds suggests non-cyber incidents are driving up employee data breaches
Unit 42 uncovers a "double agent" flaw in Google Cloud's Vertex AI, demonstrating how overprivileged AI agents can compromise cloud environments.
The post Double Agents: Exposing Security Blind Spots in GCP Vertex AI appeared first on Unit 42.
Liquibase Secure introduces Change Intelligence and Deployment Connectors for ServiceNow, GitHub, Harness, and Terraform to improve database change governance and visibility.
The post Change Intelligence and Deployment Connectors for Liquibase Secure appeared first on Security Boulevard.
A summary of the top ransomware trends from the Talos 2025 Year in Review, with a focus on identity, attacker tactics, and practical defenses.
The open-source spam filtering platform Rspamd released version 4.0.0, delivering infrastructure changes across its scan protocol, memory model, hash storage, and configuration system. Several of the changes are breaking, and at least one requires a migration step before upgrade. A new scan protocol...
It was discovered that Dovecot incorrectly handled invalid base64 SASL data.
An attacker could possibly use this issue to cause a denial of service. This
issue only affected Ubuntu 25.10. (CVE-2025-59028)
It was discovered that Dovecot script decode2text.sh incorrectly handled zip
files. An attacke...
Extradé aux États-Unis, un développeur présumé de RedLine risque jusqu’à 30 ans de prison.
Cyberattaque sur Europa.eu : Bruxelles minimise l’impact et nie toute compromission de son infrastructure interne.