> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape reveals significant threats across various sectors. Capcom confirmed a data breach exposing 11.7 million user accounts, emphasizing the risks associated with gaming platforms. In a concerning trend, an attacker compromised Microsoft 365 accounts at 79 organizations without needing passwords, utilizing replayed sign-in sessions and hidden inbox rules. Vulnerabilities in PHP continue to be exploited, with millions of attack attempts related to PHP2Shell and newly discovered RCE flaws prompting urgent patching. Additionally, Russian-linked hackers have launched destructive attacks in Ukraine, while compromised TLS certificates from eMudhra Limited highlight the ongoing risks in digital trust infrastructure. The rise of AI in cybersecurity is also notable, with AI tools being used both defensively and as vectors for new attacks.
|
// AI-powered summary generated at 12:01
The former boss of the L3Harris-owned hacking and surveillance tools maker Trenchant faces nine years in prison for selling several exploits to a Russian broker, which counts the Russian government among its customers.
Criticize the government online? The Department of Homeland Security (DHS) might ask Google to cough up your name. By abusing an investigative tool called "administrative subpoenas," DHS has been demanding that tech companies hand over users' names, locations, and more. We're explaining how companie...
Surveillance technology vendors, federal agencies, and wealthy private donors have long helped provide local law enforcement “free” access to surveillance equipment that bypasses local oversight. The result is predictable: serious accountability gaps and data pipelines to other entities, including I...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ’16 Part Epoxy’ appeared first on Security Boulevard.
Surveillance technology vendors, federal agencies, and wealthy private donors have long helped provide local law enforcement “free” access to surveillance equipment that bypasses local oversight. The result is predictable: serious accountability gaps and data pipelines to other entities, including I...
NEW YORK, Feb. 11, 2026, CyberNewswire — GitGuardian, a leading secrets and Non-Human Identity (NHI) security platform and #1 app on GitHub Marketplace, today announced a $50 million Series C funding round led by global software investor Insight Partners… (more…)
The post News alert: GitGuardian ra...
Criticize the government online? The Department of Homeland Security (DHS) might ask Google to cough up your name. By abusing an investigative tool called "administrative subpoenas," DHS has been demanding that tech companies hand over users' names, locations, and more. We're explaining how companie...
Several security issues were fixed in the Linux kernel.
New libpng packages are available for Slackware 15.0 and -current to fix a security issue.
Several security issues were fixed in Python-Multipart.
Cybersecurity researchers have discovered what they said is the first known malicious Microsoft Outlook add-in detected in the wild.
In this unusual supply chain attack detailed by Koi Security, an unknown attacker claimed the domain associated with a now-abandoned legitimate add-in to serve a fake...
New gnutls packages are available for Slackware 15.0 and -current to fix security issues.
Cyber resilience means anticipating threats, detecting them early, and recovering fast when incidents occur. Wazuh shows how its open source SIEM and XDR unify visibility, detection, and automated response to strengthen proactive defense. [...]
4 min readMany teams are approaching agentic AI with a mixture of interest and unease. Senior leaders see clear potential for efficiency and scale. Builders see an opportunity to remove friction from repetitive work. Security teams, meanwhile, are asked to enable this progress without becoming a b...
It was discovered that Python-Multipart incorrectly handled certain
regular expressions. An attacker could possibly use this issue to cause
Python-Multipart to consume excessive resources, leading to a regular
expression denial of service. This issue only affected Ubuntu 22.04 LTS.
(CVE-2024-24762...
A surge in LummaStealer infections has been observed, driven by social engineering campaigns leveraging the ClickFix technique to deliver the CastleLoader malware. [...]
New guide details how a unified, AI ready SIEM platform empowers security leaders to operate at the speed of AI, strengthen resilience, accelerate detection and response, and more.
The post The strategic SIEM buyer’s guide: Choosing an AI-ready platform for the agentic era appeared first on Microsof...
It was discovered that improper initialization of CPU cache memory could
allow a local attacker with hypervisor access to overwrite SEV-SNP guest
memory resulting in loss of data integrity. (CVE-2024-36331)
Oleksii Oleksenko, Cedric Fournet, Jana Hofmann, Boris Köpf, Stavros Volos,
and Flavien Solt...
Campaign combines stolen Telegram accounts, fake Zoom calls and ClickFix attacks to deploy infostealer malware
US Border Patrol intelligence units will gain access to a face recognition tool built on billions of images scraped from the internet.