> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
Threat actors are actively exploiting OpenClaw’s viral popularity to run a phishing campaign that targets developers on GitHub with lures of free crypto tokens.
According to a disclosure by OX Security, the campaign involves fake “CLAW” token airdrops that promise thousands...
Researchers found a new skimmer using WebRTC to steal and send payment data, bypassing traditional security controls. Sansec researchers discovered a new payment skimmer that uses WebRTC data channels instead of typical web requests to load malicious code and exfiltrate stolen payment data. “What se...
A disgruntled data analyst decides that the best response to losing his contract is to steal the entire company payroll database and demand $2.5 million in Bitcoin - signing his extortion emails from a company called "Loot."
Meanwhile, two people drive up to the entrance of the UK's nuclear subma...
GitHub vient d'annoncer que les interactions avec l'IA Copilot seront utilisées pour entraîner les modèles IA. Voici comment désactiver la collecte de données.
Le post GitHub va activer par défaut la collecte de données Copilot pour entraîner l’IA a été publié sur IT-Connect.
Most teams have security tools in place. Alerts are firing, dashboards look clean, threat intel is flowing in. On the surface, everything feels under control.
But one question usually stays unanswered: Would your defenses actually stop a real attack?
That’s where things get shaky. A control exists,...
The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used in the Operation Triangulation campaign back in 2023, according to new findings from Kaspersky.
"When Coruna was first repo...
In December, the Trump administration signed an executive order that neutered states’ ability to regulate AI by ordering his administration to both sue and withhold funds from states that try to do so. This action pointedly supported industry lobbyists keen to avoid any constraints and consequences...
Fookes Software’s latest technical evaluation shows AI-powered email classification in Aid4Mail can match or outperform TAR accuracy—without training data, seed sets, or prior AI expertise.
Halcyon and Beazley Security track the return of Iranian ransomware group Pay2Key
Courts are starting to question how platforms are built, not just what’s posted.
Reddit is introducing changes to support interactions between people. The company is taking a bottom-up approach to help users understand when they are engaging with another person unless an account is labeled otherwise. Reddit plans to verify that users are human without requiring disclosure of rea...
Analyse d’un hameçonnage aux couleurs d’un des jeux les plus populaire au monde « Clash of Clans« . ZATAZ vous montre, en vidéo, un phishing aussi beau beau que le jeu lui même. Analyse d’un hameçonnage aux couleurs de Clash of Clans Les pirates savent parfaitement où capter l’attention. Cette fois,...
TL;DR The UK’s Foreign, Commonwealth and Development Office (FCDO) has designated Xinbi, a major Chinese-language illicit guarantee marketplace. The designation…
The post UK Government Designates Xinbi, Key Node in Chinese-Language Crypto-Enabled Scam Infrastructure appeared first on Chainalysis.
Software and digital security should rely on verification, rather than trust. I want to strongly encourage more users and consumers of software to verify curl. And ideally require that you could do at least this level of verification of other software components in your dependency chains. Attacks ar...
The National Crime Agency has warned construction firms about surging invoice fraud
Google is preparing for the quantum era, a turning point in digital security, with a 2029 timeline for post-quantum cryptography (PQC) migration. Security professionals warn that current encryption could be broken by large-scale quantum computers in the coming years. This risk is already relevant du...
Hambardzum Minasyan of Armenia has been accused of being involved in the development and administration of the infostealer malware.
The post Alleged RedLine Malware Administrator Extradited to US appeared first on SecurityWeek.
From drones to missiles to submarines, the $30.5 billion defense startup wants to transform how the tools of war are made. It’s not all going as planned.
Spammers are disguising fraudulent links within legitimate survey platforms — emails containing these links easily bypass standard spam filters. We analyze the scheme, highlight the red flags, and provide defensive strategies.
300 families undergo 6-week trial to test impact on sleep, school, and home life The UK government will trial different levels of restrictions on social media for under-16s with the help of 300 families, alongside a public consultation that has already gathered nearly 30,000 responses.…