> TODAY'S SUMMARY (81 articles)
Today's cyber news highlights several critical threats and developments:
1. **PHP Vulnerabilities**: The newly discovered PHP2Shell vulnerabilities have led to millions of attempted exploits, raising concerns about potential mass compromises. PHP's latest updates are crucial for mitigating these threats.
2. **Data Breaches**: Capcom reported a significant breach exposing 11.7 million accounts, while Quest Diagnostics confirmed unauthorized access to sensitive patient data, reflecting ongoing vulnerabilities in the healthcare sector.
3. **Legal Actions**: Meta has been fined $25 billion for violating user data privacy laws, marking a significant legal precedent in data protection enforcement.
4. **Cyberattacks on Infrastructure**: A large-scale attack targeting enterprise firewalls and VPNs has exposed over 70,000 credentials, emphasizing the need for robust security measures on network edge devices.
5. **Nation-State Threats**: Russian and Iranian APTs continue to pose risks, with new tactics emerging, including AI-driven attacks and mesh network backdoors.
Organizations should prioritize patch management, data protection strategies, and vigilance against phishing and social engineering attacks to bolster their cybersecurity posture.
|
// AI-powered summary generated at 16:01
How Can Non-Human Identities Revolutionize Cybersecurity? Have you ever considered the challenges that arise when managing thousands of machine identities? Where organizations migrate to the cloud, the need for robust security systems becomes paramount. Enter Non-Human Identities (NHIs) — the unsung...
Bitwarden has launched a new system called 'Cupid Vault' that allows users to safely share passwords with trusted email addresses. [...]
Â
The post Upgraded Custom ASPM Dashboards: Build Security Views That Match How Your Teams Work appeared first on Security Boulevard.
A critical pre-authentication remote code execution vulnerability in BeyondTrust Remote Support and Privileged Remote Access appliances is now being exploited in attacks after a PoC was published online. [...]
Dottie could be made to run programs if it received specially crafted network traffic.
The research underscores how AI tools have matured in their cyber offensive capabilities, even as it doesn’t reveal novel or paradigm shifting uses of the technology.
The post Google finds state-sponsored hackers use AI at ‘all stages’ of attack cycle appeared first on CyberScoop.
Update February 25, 2026: Discord announced yesterday that it will delay the global rollout of its age verification system to the "second half of 2026", instead of March. The company also said it has announced stricter requirements for partners offering facial age estimation, including that the proc...
Discord has begun rolling out mandatory age verification and the internet is, understandably, freaking out.
At EFF, we’ve been raising the alarm about age verification mandates for years. In December, we launched our Age Verification Resource Hub to push back against laws and platform policies that...
Today, at Wild West Hackin' Fest, security researcher Wietze Beukema disclosed multiple vulnerabilities in Windows LK shortcut files that allow attackers to deploy malicious payloads. [...]
Yuhan Gao and Peng Zhou discovered that Dottie was vulnerable to prototype
pollution when altering the __proto__ magical attribute. An attacker could
possibly use this issue to achieve remote code execution.
Copilot Studio agents are increasingly powerful. With that power comes risk: small misconfigurations, over‑broad sharing, unauthenticated access, and weak orchestration controls can create real exposure. This article consolidates the ten most common risks we observe and maps each to practical detect...
AI regulation doesn’t have to be romanticized or feared. Understand what matters in AI governance, compliance, and SaaS risk management.
The post Roses Are Red, AI Is Wild: A Guide to AI Regulation appeared first on Security Boulevard.
As if snooping on your workers wasn't bad enough Your supervisor may like using employee monitoring apps to keep tabs on you, but crims like the snooping software even more. Threat actors are now using legit bossware to blend into corporate networks and attempt ransomware deployment.…
In my previous post, I walked through how disconnected MCP servers and AI agents create a growing blind spot in enterprise identity. The problem: thousands of MCP deployments running with overly broad tokens, no authentication, and no connection to your identity fabric. The solution: federate everyt...
Hackers accessed data from 6.2 million Odido accounts, exposing names, contacts, bank details, and ID numbers. Subsidiary Ben also warned customers. Hackers broke into Dutch telecom firm Odido and accessed data from 6.2 million accounts. The company confirmed the breach and said attackers took names...
Session 12B: Malware
Authors, Creators & Presenters: Dung Thuy Nguyen (Vanderbilt University), Ngoc N. Tran (Vanderbilt University), Taylor T. Johnson (Vanderbilt University), Kevin Leach (Vanderbilt University)
PAPER
PBP: Post-Training Backdoor Purification for Malware Classifiers
In recent ye...
Multiple security issues were discovered in PostgreSQL, which may result in memory disclosure or the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 15.16-0+deb12u1. We recommend that you upgrade your postgresql-15 packages.
Multiple security issues were discovered in PostgreSQL, which may result in memory disclosure or the execution of arbitrary code. For the stable distribution (trixie), these problems have been fixed in version 17.8-0+deb13u1. We recommend that you upgrade your postgresql-17 packages.
Romania's national oil pipeline operator, Conpet S.A., confirmed that the Qilin ransomware gang stole company data in an attack last week. [...]
A vulnerability has been discovered in Nginx, a high-performance web and reverse proxy server: If configured to proxy to an upstream TLS server, a man-in-the-middle injection attack was possible. For the oldstable distribution (bookworm), this problem has been fixed in version 1.22.1-9+deb12u4.