> TODAY'S SUMMARY (99 articles)
Today's cybersecurity landscape reveals several critical threats and trends. Microsoft has re-enabled the retired Exchange Web Services API to assist IT admins with broken EWS apps. The PHP2Shell vulnerabilities, which allow remote code execution, were exploited four days prior to their public disclosure, prompting urgent patching across the industry. eMudhra has discontinued its certificate business after researchers cracked weak private keys in mere seconds. Additionally, a major cyberattack on Railway has led customers to revoke secret keys due to compromised system access. INTERPOL's recent operation in Africa resulted in over 1,400 arrests, disrupting thousands of cybercrime networks. Lastly, authorities warn that scammers are evolving their tactics, particularly targeting mobile users.
|
// AI-powered summary generated at 16:00
Learn how to secure Model Context Protocol (MCP) deployments using Kyber-encapsulated context windows and zero-trust policy enforcement for post-quantum security.
The post Zero-Trust Policy Enforcement via Kyber-Encapsulated Context Windows appeared first on Security Boulevard.
Several security issues were fixed in MySQL.
libpng could be made to crash if it opened a specially crafted file.
Categories: Products & ServicesTags: Workspace
Inetutils could allow unintended access to network services.
Powertech Industrial a subi une cyberattaque, mais celle-ci n'a pas eu d'impact significatif sur ses opérations. Les mécanismes de défense et de récupération ont été activés et des experts externes ont été engagés pour aider à l'enquête et à la remédiation. L'entreprise continue d'améliorer la sécur...
Conpet, l'opérateur national de pipelines pétroliers de la Roumanie, a subi une cyberattaque qui a perturbé ses systèmes d'entreprise et mis hors ligne son site Web. L'incident n'a pas affecté les opérations de l'entreprise, mais a touché son infrastructure informatique et son site Web. Conpet enquê...
It was discovered that the RMI component of CRaC JDK 21 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung dis...
Le Ministère de la Science, de l'Innovation et des Universités a fermé partiellement son siège électronique en raison d'une incidence technique. Tous les actes administratifs en cours sont suspendus, mais les droits et intérêts légitimes des personnes concernées sont préservés. Les délais pour les d...
Transport Workers Union Local 100 experienced a data breach where an unauthorized third party accessed certain data files containing personal information, including names, dates of birth, social security numbers, and health insurance subscriber identification numbers. The breach occurred between Jan...
It was discovered that the RMI component of OpenJDK 21 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung disc...
A cyberattack was claimed by SilentRansomGroup on February 27.
It was discovered that the RMI component of OpenJDK 11 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung disc...
The group targets telecoms, critical infrastructure - all the usual high-value orgs Security researchers have attributed the Notepad++ update hijacking to a Chinese government-linked espionage crew called Lotus Blossom (aka Lotus Panda, Billbug), which abused weaknesses in the update infrastructure...
Secretaries of State are scrambling to replace cybersecurity services once provided by CISA and other federal agencies.
The post As feds pull back, states look inward for election security support appeared first on CyberScoop.
It was discovered that the RMI component of OpenJDK 8 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung disco...
Microsoft has announced that the phase-out of NT LAN Manager (NTLM) is now transitioning to disabling the protocol by default, in an effort to increase security in Windows 11 and Windows Server.
NTLM is a series of security protocols that were introduced in the 1990s, but s...
A new GlassWorm malware attack through compromised OpenVSX extensions focuses on stealing passwords, crypto-wallet data, and developer credentials and configurations from macOS systems. [...]
Over 400 malicious OpenClaw packages were uploaded in days, using MoltBot skills to spread password-stealing malware. Researchers uncovered a large malware campaign abusing AI skills for Claude Code and Moltbot users. Between late January and early February 2026, more than 400 malicious skills were...
How modern infostealers target macOS systems, leverage Python‑based stealers, and abuse trusted platforms and utilities to distribute credential‑stealing payloads.
The post Infostealers without borders: macOS, Python stealers, and platform abuse appeared first on Microsoft Security Blog.