> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
It’s the first significant cybersecurity-related announcement under Director of National Intelligence Tulsi Gabbard.
The post ODNI tackles AI, threat hunting, app cybersecurity in year-one tech review appeared first on CyberScoop.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de la société INTÉGRALE DE SURVEILLANCE ET DE CONTRÔLE, S.L. (comprenant le prononcé d'une amende de 5 000 €) pour des manquements en lien avec la base légale du traitement des données personnelles d'u...
L'Autorité suédoise de protection de la vie privée (IMY) a initié une enquête concernant l'utilisation de la vidéosurveillance au sein d'une école fondamentale de Stockholm.Le contrôle porte sur une école qui a mis en place une vidéosurveillance dans sa cantine et sa cafétéria, des zones jugées part...
Unit 42 uncovers multiple clusters of cyberespionage targeting a Southeast Asian government organization with USBFect, RATs and loaders.
The post Converging Interests: Analysis of Threat Clusters Targeting a Southeast Asian Government appeared first on Unit 42.
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre d'Enel Energia S.p.A., comprenant le prononcé d'une amende de 563 052 €, pour des manquements en lien avec des activités de prospection commerciale par téléphone et la gestion de ses sous-traitants....
L'autorité britannique de protection des données (Bureau du Commissaire à l'information, ICO) a publié une décision de sanction à l'encontre de la société TMAC Ltd (comprenant le prononcé d'une amende de 100 000 £, soit environ 118 000 €) pour des manquements en lien avec des appels de démarchage co...
Deploying agentic AI in financial services requires additional security controls that address AI-specific risks. This post walks you through comprehensive observability and fine-grained access controls—two critical capabilities for maintaining explainability and accountability in AI systems. You wil...
Can Effective Non-Human Identity Management Elevate Your Compliance Strategy? The management of Non-Human Identities (NHIs) has become a crucial aspect of regulatory compliance. NHIs, often referred to as machine identities, play an integral role in securing digital infrastructures. They are compose...
Are Your Non-Human Identities Adequately Secured? How secure is your organization’s management of non-human identities? Non-human identities (NHIs) are integral components of cybersecurity frameworks. They are not mere accessories but foundational elements that require diligent oversight and sophist...
Two security issues (cross-site scripting and directory traversal) were found in Rack, an interface for developing web applications in Ruby. For the oldstable distribution (bookworm), these problems have been fixed in version 2.2.22-0+deb12u1. For the stable distribution (trixie), these problems hav...
Are You Leveraging the Full Potential of Non-Human Identities? Non-Human Identities (NHIs) are rapidly gaining importance in digital security, and their role is particularly critical in managing cloud environments. Just as machine identities have become an integral part of cybersecurity, so too have...
Experts say that an American ground operation targeting nuclear sites in Iran would be incredibly complicated, put troops’ lives at great risk—and might still fail.
New libpng packages are available for Slackware 15.0 and -current to fix security issues.
New tigervnc packages are available for Slackware 15.0 and -current to fix security issues.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Langflow to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Langflow flaw, tracked as CVE-2026-33017 (CVSS score of 9.3), to its Known Exploited Vulne...
Dutch professional football club Ajax Amsterdam (AFC Ajax) disclosed that a hacker exploited vulnerabilities in its IT systems and accessed data belonging to a few hundred people. [...]
A new report from 404 Media sheds light on how automated license plate readers (ALPRs)Â could be used beyond the press releases and glossy marketing materials put out by law enforcement agencies and ALPR vendors. In December 2025, Georgia State Patrol ticketed a motorcyclist for holding a cell phone...
Multiple security issues were discovered in Thunderbird, which could result in the execution of arbitrary code or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 1:140.9.0esr-1~deb12u1. For the stable distribution (trixie), these problems...