> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
A new critical vulnerability that is similar to the widely-exploited CitrixBleed and CitrixBleed2 holes should be patched in NetScaler devices immediately, say experts.
The hole, CVE-2026-3055, is an out-of-bounds read vulnerability in customer-managed NetScaler ADC and Net...
Un nouveau blackmarket structure la vente de données volées avec une annonce de confidentialité ultime !
GitHub is adopting AI-based scanning for its Code Security tool to expand vulnerability detections beyond the CodeQL static analysis and cover more languages and frameworks. [...]
The Armenian man faces three counts for his role for allegedly administering “one of the most prevalent infostealing malware variants in the world.”
The post Alleged RedLine infostealer conspirator extradited to US appeared first on CyberScoop.
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, information disclosure, denial of service or privilege escalation. For the oldstable distribution (bookworm), these problems have been
En 2020, l'Agence pour la protection des données personnelles (AZOP) croate a publié une décision de sanction à l'encontre de Addiko Bank d.d., comprenant le prononcé d'une amende de 145 995,09 €, pour des manquements en lien avec l'exercice du droit d'accès. Cette affaire fait suite au refus de la...
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
L'autorité finlandaise de protection des données a publié une décision de sanction à l'encontre de Suomen Numerokeskus Oy (comprenant le prononcé d'une amende de 5 000 €) pour des manquements en lien avec le droit d'accès des personnes concernées à leurs enregistrements téléphoniques. Cette affaire...
The digital trust ecosystem is undergoing its fastest shift in decades, and for Managed Service Providers (MSPs), this change creates a major market opportunity. As of March 15, 2026, the lifespan of newly issued SSL/TLS certificates has been cut from 12 months to just six, instantly doubling the re...
Le Réseau mondial d'application des lois sur la protection de la vie privée (GPEN) a publié les résultats de son audit international de novembre 2025 sur les pratiques des sites web et applications mobiles en matière de protection de la vie privée des enfants.L'opération, coordonnée par les autorité...
How Can Non-Human Identities Securely Navigate Digital? Understanding the nuances of Non-Human Identities (NHIs) in cybersecurity is crucial for organizations striving to secure their assets. The management of NHIs, primarily those used within cloud environments, has emerged as a pivotal aspect of c...
What Does Scalable AI Security Mean for Non-Human Identities? When organizations increasingly transition to the cloud, the question that arises is: How well-equipped is your AI security to handle evolving Non-Human Identities (NHIs)? NHIs, or machine identities, have become pivotal, serving as signi...
La Cour de justice de l'Union européenne a rendu un arrêt précisant que la collecte de données biométriques par une autorité de police dans le cadre d'une enquête pénale ne peut être systématique et doit être justifiée par une stricte nécessité. Cette affaire fait suite à une demande de décision pré...
What Role Do Non-Human Identities Play in Cloud Security? The concept of Non-Human Identities (NHIs) is pivotal. These machine identities, essential for the smooth functioning of secure cloud environments, bridge the gap between security protocols and research & development teams. By managing NH...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'Institut Technique d'État 'Luigi Einaudi' de Correggio, comprenant le prononcé d'une amende de 2 000 €, pour des manquements liés à la publication des horaires des enseignants et à la communicat...
The shift suggests the tech titan is worried that 2035 is too late to wait to protect their systems, devices and data for the quantum age.
The post Google moves post-quantum encryption timeline up to 2029 appeared first on CyberScoop.
Attacks leveraging the 'PolyShell' vulnerability in version 2 of Magento Open Source and Adobe Commerce installations are underway, targeting more than half of all vulnerable stores. [...]
Apple released the next version of its operating system, patching 85 different vulnerabilities across all of them. None of the vulnerabilities are currently being exploited. The last three macOS "generations" are covered, as are the last two versions of iOS/iPadOS. For tvOS, watchOS, and visionOS, o...
A Russian hacker got 2 years in prison, $100K fine, and $1.6M judgment for running a botnet used in ransomware attacks on U.S. firms. Russian national Ilya Angelov (40) was sentenced to 24 months in prison for operating a botnet used to carry out ransomware attacks on dozens of U.S. companies. He wa...