> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. The U.S. CISA has added significant flaws in Collabora Online and Arista VeloCloud to its Known Exploited Vulnerabilities catalog, indicating active exploitation. Meanwhile, the PHP web programming language faced severe vulnerabilities, termed "PHP-ocalypse," which were exacerbated by AI-assisted discovery and exploitation. Additionally, a new UEFI bootkit, BlackX, has been reported to bypass Secure Boot, while a memory-corruption flaw in Google's Brotli decoder affects multiple widely-used software packages. Notably, Capcom experienced a data breach exposing 11.7 million email addresses, emphasizing the ongoing risks to personal data. As AI technologies evolve, their role in enhancing both vulnerability detection and exploitation remains a growing concern.
|
// AI-powered summary generated at 20:00
Russian cyberattacks targeting Ukraine’s energy infrastructure are increasingly focused on collecting intelligence to guide missile strikes rather than immediately disrupting operations, Ukrainian cybersecurity officials said.
Recent ransomware attacks targeting Romania’s critical infrastructure were likely part of a broader Russian hybrid operation aimed at undermining the country’s stability, Romania’s top cybersecurity official said.
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
The post Recent RoundCube Webmail Vulnerability Exploited in Attacks appeared first on SecurityWeek.
A Russian-speaking cybercriminal used commercial generative AI tools to hack over 600 FortiGate devices across 55 countries. Amazon Threat Intelligence reports that a Russian-speaking, financially motivated threat actor used commercial generative AI services to compromise more than 600 FortiGate dev...
Attackers are actively exploiting two critical zero-day vulnerabilities in Ivanti’s Endpoint Manager Mobile (EPMM) to gain unauthenticated control of enterprise mobile device management infrastructure and install backdoors engineered to persist even after organizations apply a...
A new FBI Flash alert claims $20m was lost to ATM jackpotting attacks in 2025 alone
A ransomware attack forced the University of Mississippi Medical Center to close all of its roughly three dozen clinics around the state and cancel elective procedures.
The post Mississippi Hospital System Closes All Clinics After Ransomware Attack appeared first on SecurityWeek.
Cybersecurity researchers have disclosed what they say is an active "Shai-Hulud-like" supply chain worm campaign that has leveraged a cluster of at least 19 malicious npm packages to enable credential harvesting and cryptocurrency key theft.
The campaign has been codenamed SANDWORM_MODE by supply ch...
Officers from Poland’s Central Bureau for Combating Cybercrime (CBZC) dismantled an organized group that used phishing to seize Facebook accounts and extract BLIK payment codes from victims. Arrest (Source: Poland’s Central Bureau for Combating Cybercrime) Eleven members of an organized criminal gro...
Can you believe your ears? Increasingly, the answer is no. Here’s what’s at stake for your business, and how to beat the deepfakers.
Ransomware is now a routine business risk. True resilience comes from governance, tested incident response plans, recovery readiness, legal preparation, and trained leadership—not just security technology.
The post Ransomware Readiness is the Difference Between A Bad Day at Work and No More Workpla...
The only good password is no password at all Passwords turn 65 this year. They became a feature of computer users' lives in 1961, with MIT's Compatible Time-Sharing System (CTSS). Before then, sysops were real sysops. All jobs went through them, one at a time, and access by others was forbidden by l...
Anthropic’s Claude Code Security sparked a sharp SaaS market selloff, but investors missed a critical reality: AI code scanning addresses only half of modern cyberattacks. Identity, credentials, and human factors remain the dominant breach vectors.
The post Anthropic Didn’t Kill Cybersecurity. It J...
GitHub MCP Cross-Repository Data Leak Vulnerability In May 2025, Invariant disclosed a critical vulnerability in GitHub’s Machine Collaboration Protocol (MCP), where attackers embedded malicious commands within public repository Issues to hijack developers’ locally running AI Agents. When an AI Agen...
PayPal blamed an application error for the exposure of customer personal information for nearly 6 months.Â
The post PayPal Data Breach Led to Fraudulent Transactions appeared first on SecurityWeek.
For the latest discoveries in cyber research for the week of 23rd February, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES France’s Ministry of Economy has disclosed a data breach resulted from an unauthorized access to the national bank account registry FICOBA, impacting...
SOAR's real cost isn't license plus runtime. It's integration maintenance, playbook engineering, and analyst time. Here's how to find the number you're actually paying.
The post SOAR Is Costing More Than You Think appeared first on D3 Security.
The post SOAR Is Costing More Than You Think appeared...
Fintech operates under constant regulatory pressure. At the same time, competitive pressure demands speed, innovation, and intelligent automation. Risk and compliance systems sit at the...Read More
The post Quality Assurance for Fintech Risk and Compliance Systems in the Age of AI appeared first on...
Samsung will add Perplexity to its next generation of Galaxy devices as part of the expansion of its Galaxy AI multi-agent ecosystem. Users will be able to access Perplexity through quick-access controls, such as pressing and holding the side button, or by using the voice wake phrase “Hey, Plex.” Pe...
University of Mississippi Medical Center is still scrambling to respond to a ransomware attack last Thursday