> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
Entro Security has announced Agentic Governance & Administration (AGA), a new pillar of its platform designed to help security and identity teams govern AI agents and AI access paths across enterprise systems. The company is showcasing AGA at RSA Conference 2026. The core problem AGA addresses i...
It was discovered that Mbed TLS incorrectly handled memory allocation
failures. A remote attacker could possibly use this issue to crash
the program. This issue only affected Ubuntu 18.04 LTS and Ubuntu
20.04 LTS. (CVE-2021-44732)
Jonathan Winzig discovered that Mbed TLS incorrectly handled crafted...
A hacktivist group claims to have obtained sensitive data on crime tipsters and the people they reported, dating back to 1987.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Miggo Security is significantly expanding its Runtime Defense Platform at RSA Conference 2026, adding an AI Bill of Materials, runtime guardrails, and Agentic Detection and Response capabilities. The release is aimed at organizations running AI agents, Model Context Protocol toolchains, and shadow A...
Several security issues were fixed in the Linux kernel.
Skyhawk Security has added Threat Actor Context to its cloud security platform, giving security teams a way to understand simulated attack scenarios through the lens of known adversary behavior. The enhancement connects Skyhawk’s AI Red Team attack simulations to real-world threat actors, their camp...
A ransomware attack has disrupted digital systems at Spain’s Port of Vigo, forcing authorities to disconnect parts of its network and temporarily manage cargo operations manually.
Novee has introduced AI Red Teaming for LLM Applications, an autonomous security testing capability built into its AI penetration testing platform. The product is designed to find vulnerabilities in AI-powered applications before attackers do, addressing a category of risk that traditional pentestin...
Cloud Android phones fuel financial fraud, evading detection and enabling dropper accounts
Read the latest Microsoft Secure Access report for insights into why a unified identity and access strategy offers strong modern protection.
The post Identity security is the new pressure point for modern cyberattacks appeared first on Microsoft Security Blog.
The startup will invest in product development and go-to-market efforts as it expands into new sectors.
The post Onit Security Raises $11 Million for Exposure Management Platform appeared first on SecurityWeek.
Read the latest DFIR news – courtroom challenges to expert testimony, a new Windows 11 execution artifact, Lost Apples 2.0, AI-generated abuse imagery concerns, and more.
The State Department has officially operationalized the Bureau of Emerging Threats (ET), a high-stakes unit designed to shield American interests from the weaponization of advanced technology by foreign adversaries. The bureau’s launch marks the culmination of a sweeping reorganization plan introdu...
Citrix has patched two NetScaler ADC and NetScaler Gateway vulnerabilities, one of which is very similar to the CitrixBleed and CitrixBleed2 flaws exploited in zero-day attacks in recent years. [...]
Opera GX, le navigateur web pensé pour le gaming, débarque officiellement sur Linux. Il intègre un VPN, un bloqueur de pubs et d'autres fonctionnalités.
Le post Le navigateur Opera GX débarque sur Linux avec son VPN et son Ad-blocker intégré ! a été publié sur IT-Connect.
Faux freelances, pubs opaques, applis massives : comment l’espionnage économique vise la France au quotidien.
After years of tech industry experiments, smartglasses with embedded cameras and microphones have finally gone mainstream. And, disturbingly, sometimes it's not just their owners who are watching what these devices record. In this week's EFFector newsletter, we're taking a closer look at the privacy...
Executive Insight
Â
For decades, enterprises relied on strong encryption to protect sensitive data in transit, and encryption used to be the end of the conversation. If an organization could say “we use TLS 1.3 and modern cipher suites,” that was enough to reassure boards, regulators, and cust...