> TODAY'S SUMMARY (130 articles)
Today's cybersecurity news highlights several significant threats and vulnerabilities. DreamHost has mandated password resets for users following a disruption linked to an ongoing incident. A widespread attack has seen 953 online stores, predominantly on Magento, infected with malware that evades detection. Critical vulnerabilities in the Brotli compression library have prompted emergency patches from Microsoft, PHP, and others, as exploits are actively being leveraged. Additionally, researchers have revealed a new Android spyware platform, uCreator, which stealthily targets popular messaging apps. Meanwhile, the U.S. government faces scrutiny over its handling of surveillance laws, and malicious actors are increasingly using social engineering tactics via Microsoft Teams to deploy malware.
|
// AI-powered summary generated at 20:01
Dutch spies flag large-scale campaign to hijack secure messaging accounts Russian-linked hackers are trying to break into the Signal and WhatsApp accounts of government officials, journalists, and military personnel globally â not by cracking encryption, but by simply tricking people into handing ov...
The White House released âPresident Trumpâs Cyber Strategy for America,â a policy framework outlining the administrationâs priorities for maintaining U.S. leadership in cyberspace. The seven-page cyber strategy commits to a coordinated, government-wide response to cyber threats that extends beyond c...
iProov the iProov Workforce Solution Suite, designed to protect enterprises from deepfakes and other identity attacks while improving operational efficiency. It enables organizations to verify genuine human presence and stop attackers. The suite supports remote hiring and onboarding, shared device a...
Unless you have been living under a rock over the past few days, you would have seen that AI-powered adversaries are significantly altering how we view cyberattacks and breaches. We are no longer just fighting human adversaries; we are fighting the ânew hotnessâ in cybercrime: agentic AI. As first r...
USN-8018-1 introduced a regression in Python
Abusing DNS record management controls, the threat actor hides the location of malicious content via Cloudflare.
The post Internet Infrastructure TLD .arpa Abused in Phishing Attacks appeared first on SecurityWeek.
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure Palo Alto Networks Unit 42 has published a detailed investigation into a previously undocumented Chinese threat actor cluster â designated CL-UNK-1068 â that has been quietly compromising high-value organization...
This isn't just a nostalgia trip â billions of legacy microcontrollers may be at risk AI can reverse engineer machine code and find vulnerabilities in ancient legacy architectures, says Microsoft Azure CTO Mark Russinovich, who used his own Apple II code from 40 years ago as an example.âŠ
OpenAIâs new AppSec agent, Codex Security, has already flagged over 11,000 high-severity and critical flaws in real-world codebases during its first 30 days of research testing. The tool, designed to automatically find, validate, and fix vulnerabilities in software repositorie...
Mid-market organizations are constantly striving to achieve security levels on a par with their enterprise peers. With heightened awareness of supply chain attacks, your customers and business partners are defining the security level you must meet.
What if you could be the enabler for your organizat...
Threat actors replace legitimate commands on the cloned installation webpages with malicious commands.
The post Cloned AI Tool Sites Distribute Malware in âInstallFixâ Campaign appeared first on SecurityWeek.
USN-7968-1 fixed vulnerabilities in Apache HTTP Server. The update
introduced a regression in mod_md where the MDStapleOthers setting was
ignored which resulted in OCSP being broken for some domains. This update
fixes the problem.
We apologize for the inconvenience.
Original advisory details:
It...
OpenWrt 25.12.0 is now available for download. The release incorporates over 4,700 commits since branching from OpenWrt 24.10. Package manager changes One of the most significant structural changes in 25.12.0 is the replacement of the opkg package manager with apk, the Alpine Package Keeper. The Ope...
Learn why IT governance is essential for building a secure zero-trust identity architecture and managing access, policies, and identity security.
The post IT Governance as a Prerequisite for Zero-Trust Identity Architecture appeared first on Security Boulevard.
Itâs called AirSnitch:
Unlike previous Wi-Fi attacks, AirSnitch exploits core features in Layers 1 and 2 and the failure to bind and synchronize a client across these and higher layers, other nodes, and other network names such as SSIDs (Service Set Identifiers). This cross-layer identity desynchron...
A breach at Cognizantâs TriZetto Provider Solutions exposed sensitive health data belonging to more than 3.4 million patients. A data breach at Cognizantâs TriZetto Provider Solutions exposed sensitive information belonging to more than 3.4 million patients. At this time, no ransomware group has cla...
Users looking for Anthropicâs Claude Code agentic AI coding tool are being tricked via fake Claude Code install pages into running malware, Push Security researchers have warned. The attackers behind this scheme are faithfully cloning Anthropicâs installation page, hosting it on a lookalike domain,...
Billing services provider TriZetto Provider Solutions has begun notifying millions of patients about a data breach
Das deutsche Gesetz zur Umsetzung der NIS-2-Richtlinie ist am 6. Dezember 2025 in Kraft getreten.konstakorhonen â shutterstock.com
Welche Auswirkungen IT-SicherheitsvorfĂ€lle fĂŒr die Bevölkerung haben können, hat sich etwa gezeigt, als im vergangenen Herbst ein Flughafen-...
Two Google Chrome extensions have turned malicious after what appears to be a case of ownership transfer, offering attackers a way to push malware to downstream customers, inject arbitrary code, and harvest sensitive data.
The extensions in question, both originally associated with a developer named...