> TODAY'S SUMMARY (11 articles)
Today's cybersecurity landscape reveals several critical threats and trends. A memory corruption flaw in Google's Brotli decoder affects multiple widely used applications, including Node.js, Python, and Envoy, posing risks of remote code execution. LiteLLM reported a serious incident where a leaked master key allowed attackers to hijack its GitHub release pipeline. In data breach news, Capcom suffered a breach exposing 11.7 million email addresses, while patient data was stolen in an attack on Point Vision. Additionally, the U.S. CISA highlighted actively exploited vulnerabilities in Collabora Online and Arista VeloCloud, urging immediate attention. Lastly, a new tool called Pulse has been released to help users interpret Windows event logs more clearly.
|
// AI-powered summary generated at 12:01
Several security issues were fixed in the Linux kernel.
The FBI has confirmed that the Ploutus malware, which has been around for over a decade, is still being used in the wild.
The post FBI: $20 Million Losses Caused by 700 ATM Jackpotting Attacks in 2025 appeared first on SecurityWeek.
For today’s CISOs, enterprise cyber risk management is no longer a technical exercise. It’s a leadership mandate that sits at the intersection of security, business risk, regulation, and executive accountability. Aligning proactive cybersecurity risk management strategies with the business's o...
Discover what’s new on Forensic Focus – unpack the 2025 Into the Light Index and its implications for CSAM investigations, review Endpoint Inspector’s real-world data collection capabilities, see how location intelligence is exposing SIM farm scam centres at scale, and
As SaaS platforms expand in complexity, security cannot stop at deployment. Post-launch environments introduce new integrations, user access changes, and configuration updates that significantly increase risk exposure. Without continuous validation and monitoring, vulnerabilities can quietly develop...
Feds say trio conspired to siphon processor and cryptography IP, allegedly routing some data overseas Two former Google engineers and a third alleged accomplice are facing federal charges after prosecutors accused them of swiping sensitive chip and security technology secrets and then trying to cove...
Google prevented more than 1.75 million policy-violating apps from being published on Google Play and banned over 80,000 developer accounts that attempted to publish harmful apps in 2025. Developer verification, mandatory pre-review checks, and testing requirements in the Google Play ecosystem have...
With one in three cyber-attacks now involving compromised employee accounts, insurers and regulators are placing far greater emphasis on identity posture when assessing cyber risk.Â
For many organizations, however, these assessments remain largely opaque. Elements such as password hygiene, privilege...
Appeals judge says yes in latest battle of ICO against a breached retail giant The UK's data protection watchdog has scored a small win in a lengthy legal battle against a British retail group that lost millions of data records during a 2017 breach.…
At 14:37 UTC on January 22, 2026, Nike appeared on WorldLeaks’ Tor-based leak site. The countdown timer showed 48 hours until 1.4 terabytes — 188,347 files — would be dumped onto the dark web for anyone to download. Included in the trove of files are assets from Nike’s research and development (R&am...
The FBI warned that Americans lost more than $20 million last year amid a massive surge in ATM "jackpotting" attacks, in which criminals use malware to force cash machines to dispense money. [...]
Ukrainian national Oleksandr Didenko, 29, was sentenced in U.S. District Court to 5 years in prison for an identity theft scheme that enabled North Korean workers to secure fraudulent employment. He pleaded guilty in November 2025 to wire fraud conspiracy and aggravated identity theft and agreed to...
Attackers are weaponizing Facebook ads to distribute password-stealing malware masked as a Windows download.
A 29-year-old Ukrainian national has been sentenced to five years in prison in the U.S. for his role in facilitating North Korea's fraudulent information technology (IT) worker scheme.
In November 2025, Oleksandr "Alexander" Didenko pleaded guilty to wire fraud conspiracy and aggravated identity the...
The company is investigating whether any customer or employee data was stolen by hackers.
The post Chip Testing Giant Advantest Hit by Ransomware appeared first on SecurityWeek.
The FBI warns ATM jackpotting is rising nationwide, with over $20 million lost in 2025 and 1,900 incidents reported since 2020. The FBI has warned of a sharp rise in ATM jackpotting attacks across the U.S., with losses exceeding $20 million in 2025 alone. Since 2020, about 1,900 incidents have been...
The global vulnerability landscape continues to expand rapidly, with thousands of new CVEs published every year. Thus, allowing hackers to weaponize newly disclosed flaws at an instant. Public reporting and threat intelligence analyses consistently show that exploitation often begins within days, an...
A Ukrainian national was sentenced to five years in prison for providing North Korean IT workers with stolen identities that helped them infiltrate U.S. companies. [...]
Die Staatlichen Kunstsammlungen Dresden waren Ziel einer Cyberattacke.Staatliche Kunstsammlungen Dresden
Nach dem Cyberangriff auf die Staatlichen Kunstsammlungen Dresden in diesem Januar hat das Landeskriminalamt Sachsen (LKA) eine Sonderkommission gegrĂĽndet. Diese fĂĽhre au...
In September 2025, Anthropic disclosed a groundbreaking incident—the world’s first autonomous AI-driven cyberattack. This event, documented as the first large-scale cyber offensive primarily executed by AI with minimal human intervention, underscored the immense threat posed by AI agents in maliciou...