> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
Titouan Lazard discovered a buffer overflow vulnerability in munge, an authentication service to create and validate credentials, which may allow local users to leak the MUNGE cryptographic key and forge arbitrary credentials. Additional details can be found in the upstream advisory:
Today&#;x26;#;39;s patch Tuesday addresses 59 different vulnerabilities (plus two Chromium vulnerabilities affecting Microsoft Edge). While this is a lower-than-normal number, this includes six vulnerabilities that are already exploited. Three vulnerabilities have already been exploited and made...
The European Commission’s ruling is based on extensive feedback from customers and rival cloud security and infrastructure vendors.
The post EU Unconditionally Approves Google’s $32B Acquisition of Wiz appeared first on SecurityWeek.
From March 2026, all Discord users will have a teen-appropriate experience by default, unless they can verify they are at least 18 years old.
Zero-click prompt injection can leak data when AI agents meet messaging apps, researchers warn AI agents can shop for you, program for you, and, if you're feeling bold, chat for you in a messaging app. But beware: attackers can use malicious prompts in chat to trick an AI agent into generating a dat...
The information technology (IT) workers associated with the Democratic People's Republic of Korea (DPRK) are now applying to remote positions using real LinkedIn accounts of individuals they're impersonating, marking a new escalation of the fraudulent scheme.
"These profiles often have verified work...
Group led by EFF and Imperial Valley Equity & Justice Asks Gov. Newsom and Caltrans Director to Act Immediately SAN FRANCISCO – California must revoke permits allowing federal agencies such as Customs and Border Patrol (CBP) and the Drug Enforcement Administration (DEA) to put automated license...
Group led by EFF and Imperial Valley Equity & Justice Asks Gov. Newsom and Caltrans Director to Act Immediately SAN FRANCISCO – California must revoke permits allowing federal agencies such as Customs and Border Patrol (CBP) and the Drug Enforcement Administration (DEA) to put automated license...
The company has fixed several critical vulnerabilities that can be exploited for arbitrary code execution.
The post Patch Tuesday: Adobe Fixes 44 Vulnerabilities in Creative Apps appeared first on SecurityWeek.
Interviewer: Jillian York
Yazan Badran is an assistant professor in international media and communication studies at the Vrije Universiteit Brussel, and a researcher at the Echo research group. His research focuses on the intersection between media, journalism and politics particularly in the MENA r...
Interviewer: Jillian York
Yazan Badran is an assistant professor in international media and communication studies at the Vrije Universiteit Brussel, and a researcher at the Echo research group. His research focuses on the intersection between media, journalism and politics particularly in the MENA r...
On January 12th, 2026, we received a submission for an Arbitrary File Upload vulnerability in WPvivid Backup, a WordPress plugin with more than 800,000 active installations. This vulnerability can be used by unauthenticated attackers to upload arbitrary files to a vulnerable site and achieve remote...
Several security issues were fixed in GLib.
La Commission de Protection des Informations Personnelles (PIPC) sud-coréenne a annoncé l'adoption d'un décret d'application modifiant la loi sur la protection des données personnelles, qui étend le droit à la portabilité des données à tous les secteurs d'activité.Ce décret, approuvé le 10 février p...
La Commission européenne a adopté deux décisions d'adéquation, l'une concernant le Brésil, permettant ainsi les transferts de données personnelles sans encadrement spécifique.Le 27 janvier 2026, la Commission européenne et le Brésil ont adopté des décisions d'adéquation mutuelles, jugeant leurs nive...
This investment comes less than 10 months after Reco’s last raise, bringing total funding to $85 million.
The post Reco Raises $30 Million to Enhance AI SaaS Security appeared first on SecurityWeek.
L'Autorité de protection des données personnelles polonaise (UODO) a participé à l'élaboration de lignes directrices par l'Agence des droits fondamentaux de l'Union européenne (FRA) pour garantir le respect des droits fondamentaux dans le cadre du Système d'entrée/sortie (EES).Ces lignes directrices...
L'autorité islandaise de protection des données (Personuvernd) communique sur la tenue de la Journée internationale pour un internet plus sûr le 10 février 2026.Cette journée, placée sous le thème annuel "Ensemble pour un meilleur internet", se concentre en 2026 sur "Technologie intelligente, décisi...
USN-7942-1 fixed vulnerabilities in GLib. This update provides the
corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, and Ubuntu 20.04 LTS. CVE-2025-3360 only affected Ubuntu 18.04
LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that GLib incorr...
L'autorité italienne de protection des données, le Garant pour la protection des données personnelles (GPDP), et l'Inspection nationale du travail (INL) ont initié une action de surveillance conjointe visant les centres logistiques d'Amazon en Italie.Cette initiative fait suite à des investigations...