> TODAY'S SUMMARY (81 articles)
Today's cyber news highlights several critical threats and developments:
1. **PHP Vulnerabilities**: The newly discovered PHP2Shell vulnerabilities have led to millions of attempted exploits, raising concerns about potential mass compromises. PHP's latest updates are crucial for mitigating these threats.
2. **Data Breaches**: Capcom reported a significant breach exposing 11.7 million accounts, while Quest Diagnostics confirmed unauthorized access to sensitive patient data, reflecting ongoing vulnerabilities in the healthcare sector.
3. **Legal Actions**: Meta has been fined $25 billion for violating user data privacy laws, marking a significant legal precedent in data protection enforcement.
4. **Cyberattacks on Infrastructure**: A large-scale attack targeting enterprise firewalls and VPNs has exposed over 70,000 credentials, emphasizing the need for robust security measures on network edge devices.
5. **Nation-State Threats**: Russian and Iranian APTs continue to pose risks, with new tactics emerging, including AI-driven attacks and mesh network backdoors.
Organizations should prioritize patch management, data protection strategies, and vigilance against phishing and social engineering attacks to bolster their cybersecurity posture.
|
// AI-powered summary generated at 16:01
The Dutch phone giant Odido is the latest phone and internet company to be hacked in recent months, as governments and financially motivated hackers continue to steal highly confidential information about phone customers.
Yuh-Jye Lee, a senior adviser at Taiwan’s National Security Council, delivered a stark warning about China’s intentions to use cyberspace in new and more aggressive ways.
This news comes less than a week after Ring's Super Bowl commercial stoked controversy over the company's capacity for mass surveillance.
A previously unknown threat actor tracked as UAT-9921 has been observed leveraging a new modular framework called VoidLink in its campaigns targeting the technology and financial services sectors, according to findings from Cisco Talos.
"This threat actor seems to have been active since 2019, althou...
Attackers quickly targeted BeyondTrust flaw CVE-2026-1731 after a PoC was released, enabling unauthenticated remote code execution. Threat actors rapidly began exploiting a newly patched BeyondTrust vulnerability, tracked as CVE-2026-1731 (CVSS score of 9.9), soon after a proof-of-concept exploit be...
These capabilities are needed not just to mirror what the continent’s most capable adversaries can do, but also to match Europe’s defensive posture with credible tools to gain access to target networks, he said.
Criminal IP now integrates with IBM QRadar SIEM and SOAR to bring external IP-based threat intelligence directly into detection and response workflows. See how risk scoring and automated enrichment help SOC teams prioritize high-risk IPs and accelerate investigations without leaving QRadar. [...]
Other noteworthy stories that might have slipped under the radar: vulnerabilities at 277 water systems, DoD employee acting as money mule, 200 airports exposed by flaw.
The post In Other News: Google Looks at AI Abuse, Trump Pauses China Bans, Disney’s $2.7M Fine appeared first on SecurityWeek.
At the Munich Cyber Security Conference, senior U.S. officials signaled that a defensive cyber crouch is giving way to something closer to Cold War–style deterrence — an effort to convince adversaries that the costs of hacking the United States will outweigh the benefits.
Une nouvelle vulnérabilité (CVE-2026-26012) a été corrigée dans Vaultwarden : elle permet de récupérer les mots de passe chiffrés d'autres collections.
Le post Vaultwarden – CVE-2026-26012 : cette faille expose vos mots de passe aux autres utilisateurs ! a été publié sur IT-Connect.
width="1743" height="980" sizes="auto, (max-width: 1743px) 100vw, 1743px">Das BSI empfiehlt traditionelle Verschlüsselungsverfahren mit Post-Quanten-Kryptographie zu kombinieren.ArtemisDiana – shutterstock.com
Das Bundesamt für Sicherheit in der Informationstechnik (BSI)...
CISA Warns of Exploited SolarWinds, Notepad++, Microsoft Vulnerabilities CISA flagged multiple vulnerabilities as actively exploited, spanning SolarWinds Web Help Desk, Notepad++ update integrity issues, and Microsoft Configuration Manager. The practical takeaway is that these are not theoretical bu...
Cyber and hybrid threats are now a permanent feature of Europe’s security environment, a senior Swedish defense official said, citing Russia’s full-scale invasion of Ukraine as a turning point.
Researchers have uncovered 30 Chrome extensions stealing user data. Here’s how to check your browser and remove any malicious extensions step by step.
The U.S. Department of Justice sentenced the CEO of a multi-level marketing and bitcoin trading firm to 20 years in prison after a conviction for wire fraud and money laundering tied to a large scale Ponzi scheme. Court records show that Ramil Ventura Palafox, 61, owned and controlled Praetorian Gro...
Bitwarden a révélé une nouvelle opportunité avec son gestionnaire de mots de passe : Cupid Vault. L'idée : faciliter le partage d'identifiants dans un couple.
Le post Bitwarden présente Cupid Vault pour partager ses mots de passe en toute sécurité a été publié sur IT-Connect.
CISA ordered federal agencies on Thursday to secure their systems against a critical Microsoft Configuration Manager vulnerability patched in October 2024 and now exploited in attacks. [...]
Check Point has acquired Israeli cybersecurity companies Cyata, Cyclops, and Rotate.
The post Check Point Announces Trio of Acquisitions Amid Solid 2025 Earnings Beat appeared first on SecurityWeek.
G7 countries ranked cyber-attacks as the top risk, while BICS members placed cyber threats only as the eighth most pressing risk
Hackers stole personal information such as names, addresses, and phone numbers from a customer contact system.
The post Dutch Carrier Odido Discloses Data Breach Impacting 6 Million appeared first on SecurityWeek.