> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. The U.S. CISA has added significant flaws in Collabora Online and Arista VeloCloud to its Known Exploited Vulnerabilities catalog, indicating active exploitation. Meanwhile, the PHP web programming language faced severe vulnerabilities, termed "PHP-ocalypse," which were exacerbated by AI-assisted discovery and exploitation. Additionally, a new UEFI bootkit, BlackX, has been reported to bypass Secure Boot, while a memory-corruption flaw in Google's Brotli decoder affects multiple widely-used software packages. Notably, Capcom experienced a data breach exposing 11.7 million email addresses, emphasizing the ongoing risks to personal data. As AI technologies evolve, their role in enhancing both vulnerability detection and exploitation remains a growing concern.
|
// AI-powered summary generated at 20:00
Unauthorized access to Strategic Education Inc.'s computer network resulted in the theft of sensitive information, including Social Security numbers, driver's license numbers, and passport numbers, for 2,673 Maine residents.
Art Jetter & Company discovered suspicious activity on their legacy Financial Brokerage server, which led to an unauthorized access and potential data breach. The breach occurred between February 21-23, 2026, and may have involved personal information of affected individuals. The company has taken s...
De multiples vulnérabilités ont été découvertes dans Microsoft Edge. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Ce bulletin d'actualité du CERT-FR revient sur les vulnérabilités significatives de la semaine passée pour souligner leurs criticités. Il ne remplace pas l'analyse de l'ensemble des avis et alertes publiés par le CERT-FR dans le cadre d'une analyse de risques pour prioriser l'application des...
Svealandstrafiken a subi une attaque informatique majeure, causant de grandes perturbations dans ses activités. L'attaque a eu lieu lundi et a affecté les opérations de l'entreprise. Les détails de l'attaque ne sont pas encore connus.
PLUS: Unpatched Ivanti boxes under attack; 0APT might not be a scam; AI gets better at helping cyber-scum; And more Infosec In Brief An unknown attacker accessed the French government’s database listing every bank account in the country and made off with 1.2 million records.…
This week on the Lock and Code podcast, we speak with Zach Hinkle and MinJi Pae about TikTok's new American ownership—and it's new rules.
Are DevOps Teams Finding Relief with Automated NHI Lifecycle Management? The integration of Non-Human Identities (NHIs) and Secrets Security Management into DevOps processes has emerged as a crucial strategy. But how exactly is this automation impacting the workflow and peace of mind for DevOps team...
Are Non-Human Identities the New Frontier in Cybersecurity? Where cyber threats loom large, an often-overlooked challenge is the protection and management of Non-Human Identities (NHIs). Cybersecurity is evolving rapidly, and professionals across various sectors are increasingly recognizing the stra...
Spanish police arrested a 20-year-old hacker accused of booking luxury hotel rooms worth up to €1,000 a night for just one cent before being caught. Spanish police arrested a 20-year-old man in Madrid after allegedly manipulating the online payment system of a travel and hotel booking website to sec...
How Can Organizations Protect Their Systems with Non-Human Identities? Have you ever considered the critical role that Non-Human Identities (NHIs) play in safeguarding your organization’s cybersecurity? Organizations are increasingly resorting to NHIs to maintain robust security protocols. These mac...
How Does Non-Human Identity Management Boost Security in AI Architecture? What is the role of Non-Human Identity (NHI) management in securing AI-driven architecture? With cybersecurity professionals grapple with the complexities of protecting digital environments, the management of NHIs stands as a...
An information-stealing malware operation named Arkanix Stealer, promoted on multiple dark web forums towards the end of 2025, was likely developed as an AI-assisted experiment. [...]
The University of Mississippi Medical Center shut down operations at its 35 medical clinics around the state following a ransomware attack. Healthcare facilities are top targets for cybercriminals, who look to steal the sensitive data they hold for both money and intelligence gathering.
The post Mi...
Session 13B: API Security
Authors, Creators & Presenters: Yi Yang (Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China; School of Cyber Security, University of Chinese Academy of Sciences, China), Jinghua Liu (Institute of Information Engineering, Chinese Academy of...
Super Early Bird pricing for TechCrunch Disrupt 2026 ends February 27 at 11:59 p.m. PT. That means you have just 6 days left to secure up to $680 of ticket savings.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Ninja Browser & Lumma Infostealer  Ghost Tapped: Tracking the Rise of Chinese Tap-to-pay Android Malware  Hudson Rock Identifies Real-World I...
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. U.S. CISA adds RoundCube Webmail flaws to its Kno...
Confidential complainant details passed to local politician following debate A UK councillor has dubbed her local authority's data breach "crazy" after the personal details of individuals behind a series of complaints were revealed to her.…
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Security at AI speed: The new CISO reality The CISO role has changed significantly over the past decade, but according to John White, EMEA Field CISO, Torq, the most disruptive shift is accountability d...