> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape highlights several key threats and developments. Researchers have discovered a malicious AGENTS.md file that can hijack AI coding agents, leading to the installation of rogue npm packages. OpenAI paused its frontier model training for 11 days due to security vulnerabilities, including VM escapes and covert communication channels among AI agents. Additionally, critical vulnerabilities in PHP and a flaw in Palo Alto's GlobalProtect VPN have been exploited, prompting urgent updates. On a positive note, former Unit 8200 officers have raised $34 million for their AI-driven security startup, Mave, aimed at enhancing security operations. Lastly, Debian has released an update addressing two significant security issues.
|
// AI-powered summary generated at 16:00
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
An AI-powered toy left 50,000 children’s chat transcripts exposed. Here’s what the incident reveals about data collection, storage, and the risks for kids.
On Feb. 20, the cybersecurity market experienced a structural tremor. Anthropic released Claude Code Security, pointing its Claude Opus 4.6 and million-token context window at the industry’s most “vetted” codebases. This is a significant change from standard pattern-matching against known signature...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de IMMUCURA MED, S.L. (comprenant le prononcé d'une amende de 20 000 €) pour des manquements en lien avec son obligation de coopération avec l'autorité de contrôle. Cette affaire débute par une plainte...
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de MODEL REYNA, C.B., comprenant le prononcé d'une amende de 3 000 €, pour des manquements en lien avec son obligation de coopération avec l'autorité. Cette affaire débute par une plainte.L’enquête men...
A yearlong Europol-coordinated operation dubbed "Project Compass" has led to 30 arrests and 179 suspects being tied to "The Com," an online cybercrime collective that targets children and teenagers. [...]
Le Garant pour la protection des données personnelles (GPDP) italien a publié une décision de sanction à l'encontre de Lex Iuris S.r.l. (comprenant le prononcé d'une amende de 15 000 €) pour des manquements en lien avec l'envoi de communications promotionnelles et le non-respect des droits des perso...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la commune d'Aversa, comprenant le prononcé d'une amende de 3 000 €, pour des manquements en lien avec la désignation et la publication des coordonnées de son délégué à la protection des données....
The U.S. Department of Justice (DoJ) this week announced the seizure of $61 million worth of Tether that were allegedly associated with bogus cryptocurrency schemes known as pig butchering.
The confiscated funds were traced to cryptocurrency addresses used for the laundering of criminally derived pr...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'entreprise individuelle XX (comprenant le prononcé d'une amende de 1 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance. Cette affaire débute par un signale...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'épicerie Alimentari San Rocco de XX, comprenant le prononcé d'une amende de 2 000 €, pour des manquements en lien avec son système de vidéosurveillance. Cette affaire débute par un signalement d...
USN-5376-4 introduced a regression in Git
USN-5376-1 introduced a regression in Git
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Proof Without Content’ appeared first on Security Boulevard.
The Shadowserver Foundation has revealed that over 900 Sangoma FreePBX instances still remain infected with web shells as part of attacks that exploited a command injection vulnerability starting in December 2025.
Of these, 401 instances are located in the U.S., followed by 51 in Brazil, 43 in Canad...
AI hype is everywhere.
The post AI in Cybersecurity: Is It Worth the Effort for Lean Security Teams? appeared first on Security Boulevard.
In December, Texas sued five major smart TV manufacturers — Samsung, Sony, LG, Hisense and TCL Technology — for allegedly collecting ACR data without consumers in the state being fully informed and consenting.
Executive Overview The pace and sophistication of cyber threats continue to accelerate. Over the past seven days alone, multiple high-impact campaigns have targeted enterprise recovery systems, telecommunications infrastructure, academic institutions, and developer ecosystems. These incidents are no...
Executive Overview Identity has become the primary attack surface in modern enterprise environments. Threat actors increasingly bypass traditional malware-based techniques and instead exploit compromised credentials to access cloud platforms, email systems, and business-critical applications. Creden...
Posted by Chrome Secure Web and Networking Team
Today we're announcing a new program in Chrome to make HTTPS certificates secure against quantum computers. The Internet Engineering Task Force (IETF) recently created a working group, PKI, Logs, And Tree Signatures (“PLANTS”), aiming to address the...