> TODAY'S SUMMARY (133 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. The LiteLLM project was compromised, leading to the distribution of malware designed to steal sensitive credentials. The Indian certificate authority eMudhra is withdrawing from the SSL/TLS market after its private keys were found to be trivially guessable, prompting major tech firms to block its certificates. A significant vulnerability in Signal could expose users' audio and video after call hang-ups, necessitating immediate updates. Additionally, two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, are now being exploited widely, with attempts detected before public disclosure. Organizations are urged to bolster defenses against a limited range of critical vulnerabilities often targeted by attackers.
|
// AI-powered summary generated at 20:01
Step Finance announced that it lost $40 million worth of digital assets after hackers compromised devices belonging to the company's team of executives. [...]
Nick Andersen, a top CISA official, discussed plans for improving CIPAC and developing an AI-ISAC.
The post What’s next for DHS’s forthcoming replacement critical infrastructure protection panel, AI information sharing appeared first on CyberScoop.
“I think that we'll have some news on CIRCIA in pretty short order, in the next couple of weeks, hopefully,” Nick Andersen, executive assistant director for cybersecurity at CISA, told reporters.
Limited attacks occurred prior to Ivanti’s disclosure, followed by mass exploitation by multiple threat groups. More than 1,400 potentially vulnerable instances remain exposed.
The post Ivanti’s EPMM is under active attack, thanks to two critical zero-days appeared first on CyberScoop.
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added SolarWinds Web Help Desk, Sangoma FreePBX, and GitLab f...
CVE-2025-40551 carries a critical severity score of 9.8 out of 10 and impacts SolarWinds Web Help Desk (WHD) — an IT service management platform used by many large organizations to handle ticketing, asset tracking and other tasks.
Security researchers from cloud cybersecurity firm Wiz disclosed a critical vulnerability in Moltbook, a newly launched social network designed for AI agents, that allowed them to breach the platform’s backend and access private information in under three minutes. Moltbook is a newly launched social...
A coordinated reconnaissance campaign targeting Citrix NetScaler infrastructure over the past week used tens of thousands of residential proxies to discover login panels. [...]
Session 11B: Binary Analysis
Authors, Creators & Presenters: Yongpan Wang (Institute of Information Engineering Chinese Academy of Sciences & University of Chinese Academy of Sciences, China), Hong Li (Institute of Information Engineering Chinese Academy of Sciences & University of Chine...
Articles
Download MSP Authorization Form to authorize WatchGuard MDR to access CrowdStrike tenant
Firebox Cloud support for TLS v1.2 for Azure Blob Storage
ThreatSync+ NDR sFlow sample size
Known Issues
Edge browser with strict tracking prevention cannot access WatchGuard Cloud Resource Center
Mo...
Two agents involved in the shooting deaths of US citizens in Minneapolis are reportedly part of highly militarized DHS units whose extreme tactics are generally reserved for war zones.
"We will protect [children] from the digital Wild West," Prime Minister Pedro Sanchez reportedly said in remarks at the World Government Summit in Dubai.
CISA has flagged a critical SolarWinds Web Help Desk vulnerability as actively exploited in attacks and ordered federal agencies to patch their systems within three days. [...]
A security issue was discovered in Thunderbird, which could result in information disclosure For the oldstable distribution (bookworm), this problem has been fixed in version 1:140.7.1esr-1~deb12u1. For the stable distribution (trixie), this problem has been fixed in
Several security issues were fixed in Django.
Too slow react-ion time Baddies are exploiting a critical bug in React Native's Metro development server to deliver malware to both Windows and Linux machines, and yet the in-the-wild attacks still haven't received the "broad public acknowledgement" that they should, according to security researcher...
Feb 03, 2026 - Jeremy Snyder - The rise of generative AI has changed how businesses operate. In almost every company, leaders are looking for ways to use AI to work faster and smarter. However, this shift has created a major challenge for security teams. Most of the AI activity inside an organizatio...
The use of administrative subpoenas, which are not subject to judicial oversight, are used to demand a wealth of information from tech companies, including the owners of anonymous online accounts documenting ICE operations.
The 60-year-old detainee, a Polish national, worked in the Ministry of National Defense’s strategy and planning department, including on military modernization projects, officials said. He was arrested at his workplace at the ministry’s headquarters in Warsaw.
 After having a short discussion with Gemini about Chinese Money Laundering, I could tell we weren't quite connecting on my Mandarin-assistance requests, so I shared an example post from a Telegram "Crime-as-a-Service" group that was part of a Chinese Guarantee Syndicate.
For context, these posts we...