> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
Cybersecurity company’s annual report issues warning over a “mass-marketed impersonation crisis” over attackers abusing legitimate credentials
Services at Centros de Servicios al Conductor (CESCO) — the agency responsible for issuing licenses, permits and vehicle registrations in Puerto Rico — cancelled all appointments due to a cyber incident.
Seceon has won four Global InfoSec Awards at RSA Conference 2026 and used the event to announce two new platform capabilities: ADMP (AI Agent Discovery, Monitoring, and real-time Protection) and SeraAI 2.0. The four award wins span MSSP enablement, critical infrastructure protection, AI/ML innovatio...
A Russian national has been sentenced to 24 months in prison after admitting he managed a botnet used to launch ransomware attacks against dozens of U.S. companies. The judge also imposed a $100,000 fine and ordered him to forfeit $1.6 million linked to the scheme. Court records show that from 2017...
PRE Security has released platform version 3.3, introducing two major new capabilities, SignalGate and a fully agentic Autonomous Security Operator, alongside two awards from the 2026 Cybersecurity Excellence Awards. The announcements coincide with RSAC 2026 in San Francisco. SignalGate is PRE Secur...
Several security issues were fixed in the Linux kernel.
TP-Link patched a high severity flaw (CVE-2025-15517) in Archer NX routers that could let attackers bypass authentication and install malicious firmware. TP-Link issued security updates for its Archer NX router series to fix multiple vulnerabilities, including CVE-2025-15517 (CVSS score of 8.6), a c...
Ilya Angelov, 40, of Tolyatti, Russia, pleaded guilty to managing a botnet that other cybercriminals used to break into corporate systems and deploy ransomware.
Grâce au kit DarkSword, une simple visite sur un site web malveillant peut permettre à un attaquant de pirater votre iPhone. Voici comment se protéger.
Le post DarkSword permet de pirater un iPhone avec une simple page web a été publié sur IT-Connect.
The FCC announced a ban on routers made outside the US, but it could backfire. Here’s the real risk, and what you can do about it.
Several security issues were fixed in the Linux kernel.
Ilya Angelov was a member of the cybercrime group tracked as TA-551, Shathak, Gold Cabin, Monster Libra, and ATK236.
The post Russian Cybercriminal Gets 2-Year Prison Sentence in USÂ appeared first on SecurityWeek.
Cybersecurity researchers have flagged a new evolution of the GlassWorm campaign that delivers a multi-stage framework capable of comprehensive data theft and installing a remote access trojan (RAT), which deploys an information-stealing Google Chrome extension masquerading as an offline version of...
PwC finds AI is amplifying speed and scale of attacks, as identity theft evolves into a cybercriminal supply chain.
The post AI Speeds Attacks, But Identity Remains Cybersecurity’s Weakest Link appeared first on SecurityWeek.
Find out how to stop Android apps running in the background, and read our tips to keep your phone more secure.
AI accounts are becoming part of the cybercrime supply chain, sold like email accounts or VPS access. Flare Systems shows how underground markets bundle and resell premium AI access at scale. [...]
You can't monetize what you can't see. Learn how DataDome's AI traffic detection helps publishers control access, stop content theft, and turn risk into revenue.
The post You Can’t Monetize What You Can’t See: AI Traffic Detection for Publishers appeared first on Security Boulevard.
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
Vorlon has unveiled AI Agent Flight Recorder and AI Agent Action Center, adding forensics and coordinated response to secure enterprise agentic ecosystems and close a key security gap. The agentic ecosystem contains SaaS applications, AI agents, API integrations, non-human identities, and the sensit...
Halfway through RSAC, even a blind man can see the writing on the wall. It’s all about the agents. Not one vendor. Not one product category. Not one over-caffeinated keynote speaker trying to coin the next buzzword. Just about every serious conversation I’ve had, every meaningful announcement, and...