> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
Single-turn jailbreaks are getting caught. Guardrails have matured. The easy wins — “ignore previous instructions,” base64-encoded payloads, DAN prompts — trigger refusals on most production models within milliseconds. But real attackers don’t give up after one message. They have conversations. Augu...
The GlassWorm malware campaign is being used to fuel an ongoing attack that leverages the stolen GitHub tokens to inject malware into hundreds of Python repositories.
"The attack targets Python projects — including Django apps, ML research code, Streamlit dashboards, and PyPI packages — by appending...
Imagine a newspaper publisher announcing it will no longer allow libraries to keep copies of its paper.Â
That’s effectively what’s begun happening online in the last few months. The Internet Archive—the world’s largest digital library—has preserved newspapers since it went online in the mid-1990s. T...
Last week's cyberattack on medical technology giant Stryker was limited to its internal Microsoft environment and remotely wiped tens of thousands of employee devices. [...]
The evolution of Iranian cyber operations in broad context: from custom wiper malware to misuse of legitimate admin tools and more.
The post Iranian Cyber Threat Evolution: From MBR Wipers to Identity Weaponization appeared first on Unit 42.
Cloudflare is appealing a €14 million fine from Italian regulators over "Piracy Shield," a system that forces providers to block content without oversight. We are challenging this framework to protect the Internet from disproportionate overblocking and lack of due process.
Author, Creator & Presenter: Bryson Loughmiller -- Founder, [Petracore](https://petracore.io)
________________________________________________________________
Our thanks to BSidesCache for publishing their Creators, Authors and Presenter’s outstanding BSidesCache 2025 content on the Organization...
Hacktivists use proxy services from Russia, China for 'billions of designed-for-abuse connection attempts' Cybercrime has skyrocketed since the start of the Iran war, according to Akamai, which reports a 245 percent increase in everything from credential harvesting attempts to automated reconnaissan...
L'Office polonais de protection des données personnelles (UODO) a publié une décision de sanction à l'encontre de la société Restaurant Partner Polska, qui exploite la plateforme Glovo, comprenant le prononcé d'une amende de 5 898 064 PLN (environ 1 371 875 €) pour des manquements en lien avec la co...
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de la structure A.A.A., comprenant le prononcé d'une amende de 1 000 €, pour des manquements en lien avec le principe de minimisation des données. Cette affaire débute par une plainte signalant que la...
Analyse cyber d’un message lié à ShinyHunters et à la fin de BreachForums, entre intimidation, propagande et stratégie de réputation dans l’écosystème cybercriminel.
CISA warned U.S. government agencies to secure their Wing FTP Server instances against an actively exploited vulnerability that may be chained in remote code execution attacks. [...]
Poland officials say the cyberattack late last week appears to have been launched by an Iranian threat group, though they noted that bad actors not associated with any country in the war could have been behind it and used tactics associated with Iranian threat groups to cover their own tracks.
The...
The case, which had its roots in 2018, originated in the way that Amazon obtained consent from European consumers.
Zhicheng Chen discovered that curl could incorrectly reuse the wrong
connection for Negotiate-authenticated HTTP or HTTPS requests. This could
result in the use of credentials from a different connection, contrary to
expectations. This issue only affected Ubuntu 20.04 LTS. (CVE-2026-1965)
It was di...
Drivers in the Russian city of Perm have been enjoying an unexpected bonus this week: free parking.
Not because the city council suddenly decided to embrace generosity - but rather because hackers succeeded in knocking the city's payment system offline.
Read more in my article on the Hot for S...
Roundcube Webmail could be made to run arbitrary code via cross-site scripting.
Electronic ordering systems belonging to the medical device company Stryker are still down a week after a cyberattack believed to have wiped thousands of company devices of all information. The company said its digital products are safe for use.
We found fake “verify you are human” pages on hacked WordPress sites that trick Windows users into installing the Vidar infostealer.
As organizations adopt AI, security and governance remain core primitives for safe AI transformation and acceleration.
The post New Microsoft Purview innovations for Fabric to safely accelerate your AI transformation appeared first on Microsoft Security Blog.