> TODAY'S SUMMARY (16 articles)
Today's cybersecurity news highlights several significant threats and trends. Researchers have demonstrated a remote code execution (RCE) exploit in Node.js, termed "Node2Shell," that leverages malicious Brotli data to run attacker-supplied code. Additionally, attackers are attempting to exploit newly disclosed PHP2Shell vulnerabilities to incorporate systems into a Mirai botnet variant, with attempts noted just days prior to patch releases. Iran's "Prince of Persia" APT has reestablished a command and control server in the U.S. after several years. Meanwhile, INTERPOL's Operation Serengeti III has resulted in over 1,400 arrests and the recovery of $105 million, showcasing ongoing global efforts to combat cybercrime. Lastly, a serious breach at Capcom has exposed 11.7 million accounts, underscoring the persistent risks of data leaks.
|
// AI-powered summary generated at 08:01
This article examines the widespread collection of personal data and the legal challenges individuals face from third-party subpoenas. It discusses key court rulings on government access to personal information and highlights the complexities of data privacy in the digital age.
The post How the Sup...
Winter Olympics hit by suspected âRussian originâ cyberattack â as one of Europeâs largest universities also reports major cybersecurity incident Italy said it blocked a wave of cyberattacks described as âof Russian originâ targeting systems tied to the Milano Cortina 2026 Winter Olympics, including...
A new commercial mobile spyware platform dubbed ZeroDayRAT is being advertised to cybercriminals on Telegram as a tool that provides full remote control over compromised Android and iOS devices. [...]
Available via Telegram, researchers warn ZeroDayRAT is a âcomplete mobile compromise toolkitâ comparable to kits normally requiring nation-state resources to develop.
The post New âZeroDayRATâ Spyware Kit Enables Total Compromise of iOS, Android Devices appeared first on SecurityWeek.
Estimated to have infected 7,000 systems, the botnet uses a mass-compromise pipeline, deploying various scanners and malware.
The post New âSSHStalkerâ Linux Botnet Uses Old Techniques appeared first on SecurityWeek.
Sur demande de l'ANSSI, un audit de sécurité approfondi du code source et de l'architecture de HAProxy a été réalisé : la solution est sécurisée et robuste.
Le post Ă la demande de lâANSSI, la solution open source HAProxy a Ă©tĂ© auditĂ©e : verdict, le code est blindĂ© ! a Ă©tĂ© publiĂ© sur IT-Connect.
Operation Cyber Guardian was Singaporeâs largest and longest running anti-cyber threat law enforcement operation
In 2023, the science fiction literary magazine Clarkesworld stopped accepting new submissions because so many were generated by artificial intelligence. Near as the editors could tell, many submitters pasted the magazineâs detailed story guidelines into an AI and sent in the results. And they werenâ...
Internetâexposed and vulnerable SolarWinds Web Help Desk (WHD) instances are under attack by threat actors looking to gain an initial foothold into target organizationsâ networks, Microsoft and Huntress researchers have warned. Once inside, the attackers are deploying legitimate remote access and di...
Forcepoint X-Labs researchers have identified a large Phorpiex botnet-aided phishing campaign that uses weaponized Windows shortcut files to deploy Global Group ransomware across victim systems.
The campaign, observed in late 2024 and continuing into 2026, leverages a commo...
NCSC call firms to âact nowâ following disruptive malware attacks targeting Polish energy providers
Senegal closed its national ID card office after a ransomware cyberattack disrupted ID, passport, and biometric services. Senegal confirmed a cyberattack on the Directorate of File Automation, the government office that manages national ID cards, passports, and biometric data. After ransomware claim...
January 5, 2026, Seattle, USA â ZAST.AI announced the completion of a $6 million Pre-A funding round. This investment came from the well-known investment firm Hillhouse Capital, bringing ZAST.AI's total funding close to $10 million. This marks a recognition from leading capital markets of a new solu...
A single benign-sounding prompt can systematically strip safety guardrails from major language and image models, raising fresh questions about the durability of AI alignment when models are customized for enterprise use, according to Microsoft research.
The technique, dubbe...
Affecting both RS and PRA, the bug can be exploited remotely via crafted requests without authentication.
The post BeyondTrust Patches Critical RCE Vulnerability appeared first on SecurityWeek.
HR outsourcer Conduent confirms intruders accessed benefits-related records tied to US personnel Nearly 17,000 Volvo employees had their personal data exposed after cybercriminals breached Conduent, an outsourcing giant that handles workforce benefits and back-office services.âŠ
SYTECH partnered with Futures For All to deliver a two-day âCrack the Caseâ digital forensics workshop, engaging 141 students worldwide and inspiring the next generation of cyber professionals.
SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance.
The incident took place on January 29, 2026, when a mail server that was not updated to the latest version was compromised, the company's Chief Com...
Dutch agencies confirmed attacks exploiting Ivanti EPMM flaws that exposed employee contact data at the data protection authority and courts. Dutch authorities said cyberattacks hit the Dutch Data Protection Authority and the Council for the Judiciary after hackers exploited newly disclosed flaws in...
China-linked UNC3886 targeted all four major telecom providers, but did not disrupt services or access customer information.
The post Singapore: Rootkits, Zero-Day Used in Chinese Attack on Major Telecom Firms appeared first on SecurityWeek.