> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de la société MAR DEGUSTACIÓN, S.L, comprenant le prononcé d'une amende de 600 € pour des manquements en lien avec son système de vidéosurveillance. Cette affaire débute par une plainte concernant l'in...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la société Radio Immagine Uno S.r.l., éditrice de la publication journalistique en ligne “Lunanotizie.it”, comprenant le prononcé d'une amende de 10 000 €, pour des manquements en lien avec la ges...
An ongoing phishing campaign is targeting French-speaking corporate environments with fake resumes that lead to the deployment of cryptocurrency miners and information stealers.
"The campaign uses highly obfuscated VBScript files disguised as resume/CV documents, delivered through phishing emails,"...
2 min readThe Trivy incident exposed a credential architecture failure, not just a supply chain one. Here’s the case for workload identity and access.
The post Introducing the Identity and Access Gaps in the Age of Autonomous AI Survey Report appeared first on Aembit.
The post Introducing the Iden...
Qualys discovered that several vulnerabilities existed in the AppArmor
Linux kernel Security Module (LSM). An unprivileged local attacker could
use these issues to load, replace, and remove arbitrary AppArmor profiles
causing denial of service, exposure of sensitive information (kernel
memory), loca...
The Federal Communications Commission has banned all consumer routers produced outside of the U.S. from being imported unless their manufacturers obtain an exemption due to what the agency called an “unacceptable risk" to national security.
Understand why passkeys fail on some devices. Explore OS support, browser compatibility, WebAuthn limitations, and practical fixes for implementing passkeys reliably.
The post Why Passkeys Don’t Work on Some Devices: Device-Level Limitations appeared first on Security Boulevard.
Google Chromebooks and Workspace rule US classrooms. Lawsuits claim they collect student data without parental consent. What you should know.
Silver Fox pivots from ValleyRAT tax lures to WhatsApp‑style stealers, blending espionage & phishing
A summary of the announcements made by vendors on the first day of the RSAC 2026 Conference.
The post RSAC 2026 Conference Announcements Summary (Day 1) appeared first on SecurityWeek.
Swissbit is using RSAC 2026 to mark a series of real milestones for its iShield Key 2, the hardware security key the company launched last year as the first FIDO device to combine digital and physical access in a single token. The most immediately significant announcement: HID Seos support is now av...
Redis could be made to crash or run programs if it received specially crafted network traffic.
A Federal Register notice seeks public comment on how cyber is covered within a 2002 law and program.
The post Treasury asks whether terrorism risk insurance program should bolster cyber coverage appeared first on CyberScoop.
A critical vulnerability in Citrix’s NetScaler products allows unauthenticated remote attackers to leak information from the appliance's memory
The system could be made to run programs as an administrator.
Microsoft has fixed a known issue causing Gmail and Yahoo email synchronization and connection problems for classic Outlook users. [...]
Over 3.1M people affected as QualDerm Partners suffered a December 2025 breach, exposing personal, medical, and health insurance data. Over 3.1 million people are affected by a December 2025 data breach at QualDerm Partners, where hackers stole personal, medical, and health insurance information fro...
The US Federal Communications Commission (FCC) has imposed a ban on all new routers manufactured overseas being imported into and sold within the United States.
The post Uncle Sam closes the door on all new foreign-made routers appeared first on Help Net Security.
LUXEMBOURG, Luxembourg, March 24, 2026, CyberNewswire— Gcore, the global infrastructure and software provider for AI, cloud, network, and security solutions, today announced the findings of its Q3-Q4 2025 Gcore Radar report DDoS attack trends.
The report reveals growing attack … (more…)
The post Ne...