> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
ProjectDiscovery launched Neo commercially at RSAC 2026, bringing an autonomous penetration testing platform to market after winning the RSAC Innovation Sandbox in 2025. Neo performs end-to-end penetration tests, validates findings against live applications, and delivers what the company calls pente...
Tanium used RSAC 2026 to announce a wave of platform updates aimed at pushing enterprises closer to fully autonomous IT operations. The new capabilities span security operations, exposure management, and endpoint management, and they lean heavily on AI and real-time endpoint intelligence. The headli...
Several security issues were fixed in the Linux kernel.
The choice to ban all foreign-made routers instead of targeting known risks could create legal and supply chain disruptions with unclear national security returns.
The post Critics call FCC router rule a ‘big swing’ that could create more supply chain uncertainty appeared first on CyberScoop.
Modern apps no longer have well-defined boundaries. In today’s SaaS ecosystem of cloud-native applications and hybrid setups, a mix of internal and third-party APIs often serve as the primary pipelines through which apps access information. Almost all transactions, whether authentication, data tran...
Several security issues were fixed in the Linux kernel.
Mozilla released Firefox 149 with added privacy protection through a built-in VPN tool offering up to 50GB of monthly traffic. [...]
Crunchyroll said it continues to investigate the data breach involving its users' personal information.
Almost all of our live and virtual training sessions are conducted privately for a specific group or agency. This allows us to customize the content for your needs. On rare occasion, we participate in a course with open enrollment. For the first time in years, we have two upcoming courses open to th...
A large-scale malvertising campaign active since January 2026 has been observed targeting U.S.-based individuals searching for tax-related documents to serve rogue installers for ConnectWise ScreenConnect that drop a tool named HwAudKiller to blind security programs using the bring your own vulnerab...
This research report explores the layers of agent intent and how to align them for secure enterprise AI adoption.
The post Governing AI agent behavior: Aligning user, developer, role, and organizational intent appeared first on Microsoft Security Blog.
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de A.A.A., comprenant le prononcé d'une amende de 300 €, pour des manquements en lien avec la diffusion d'une vidéo sans base légale. Cette affaire débute par une plainte déposée le 25 avril 2024, sign...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Ciemme S.r.l.s. comprenant le prononcé d'une amende de 1 000 € pour des manquements en lien avec son obligation de coopération. Cette affaire débute par une plainte concernant la réception d'appel...
Databricks is moving into cybersecurity with the launch of Lakewatch, a new security platform that reflects the company’s focus on extending its data and AI capabilities into adjacent enterprise markets. The product, an open and AI-driven security information and event management (SIEM) system, rep...
L'Autorité de protection des données personnelles hellénique a publié des lignes directrices détaillant les obligations de conformité au RGPD pour l'élaboration de toute réglementation impliquant un traitement de données personnelles.La consultation de l'autorité est obligatoire avant l'adoption de...
L'Autorité pour la protection des données personnelles (GPDP) a publié une décision de sanction à l'encontre de la société Dante Labs S.r.l., comprenant le prononcé d'une amende de 600 €, pour un manquement à son obligation de coopérer avec l'autorité. Cette affaire débute par une plainte d'un clien...
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
La Commission Nationale de contrôle de la protection des Données à caractère Personnel (CNDP) marocaine a communiqué sur plusieurs de ses récentes activités, notamment la signature de conventions et d'un mémorandum d'entente.Le 3 mars 2026, l'autorité a signé une convention avec l'Ordre National des...
L'Autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre du syndicat de copropriétaires A.A.A., comprenant le prononcé d'une amende de 450 €, pour des manquements liés au non-respect d'une injonction de l'autorité. Cette affaire débute par une plainte conc...
An ongoing phishing campaign is targeting French-speaking corporate environments with fake resumes that lead to the deployment of cryptocurrency miners and information stealers.
"The campaign uses highly obfuscated VBScript files disguised as resume/CV documents, delivered through phishing emails,"...