> TODAY'S SUMMARY (99 articles)
Today's cybersecurity landscape reveals several critical threats and trends. Microsoft has re-enabled the retired Exchange Web Services API to assist IT admins with broken EWS apps. The PHP2Shell vulnerabilities, which allow remote code execution, were exploited four days prior to their public disclosure, prompting urgent patching across the industry. eMudhra has discontinued its certificate business after researchers cracked weak private keys in mere seconds. Additionally, a major cyberattack on Railway has led customers to revoke secret keys due to compromised system access. INTERPOL's recent operation in Africa resulted in over 1,400 arrests, disrupting thousands of cybercrime networks. Lastly, authorities warn that scammers are evolving their tactics, particularly targeting mobile users.
|
// AI-powered summary generated at 16:00
DataDome blocked 16M+ bot requests from 3.9M IPs targeting a global sports organization's ticket sales. See how we stopped industrial-scale scalpers.
The post How DataDome Stopped Millions of Ticket Scalping Bots Targeting a Global Sports Organization appeared first on Security Boulevard.
Why it would be useful to identify the specific hacking group behind a malware file found in your infrastructure.
Nitrogen ransomware was derived from the previously leaked Conti 2 builder
code, and is similar to Nitrogen ransomware, but a coding mistake in the
ESXi malware causes it to encrypt all the files with the wrong public key,
irrevocably corrupting them. This means that even the threat actor is
incapab...
LockFiles et LockTransfer sont les deux solutions françaises de chez LockSelf pour le stockage sécurisé et le partage de fichiers, notamment par e-mail.
Le post LockTransfer et LockFiles : un duo pour stocker et partager des données en toute sécurité a été publié sur IT-Connect.
Microsoft has confirmed that a known issue preventing some Windows 11 devices from shutting down also affects Windows 10 systems with Virtual Secure Mode (VSM) enabled. [...]
Your favorite menu item might be easy to remember but it will not secure your account Change Your Password Day took place over the weekend, and in case you doubt the need to improve this most basic element of cybersecurity hygiene, even McDonald's – yes, the fast food chain – is urging people to get...
Several threat clusters are using vishing in extortion campaigns that include tactics that are consistent with those used by high-profile threat group ShinyHunters. They are stealing SSO and MFA credentials to access companies' environments and steal data from cloud applications, according to Mandi...
A high-severity security flaw has been disclosed in OpenClaw (formerly referred to as Clawdbot and Moltbot) that could allow remote code execution (RCE) through a crafted malicious link.
The issue, which is tracked as CVE-2026-25253 (CVSS score: 8.8), has been addressed in version 2026.1.29 released...
CSPM tools are big business. Could they be the answer to your cloud configuration problems?
A prolific data ransom gang that calls itself Scattered Lapsus Shiny Hunters (SLSH) has a distinctive playbook when it seeks to extort payment from victim firms: Harassing, threatening and even swatting executives and their families, all while notifying journalists and… Read More »
In January 2025 I received the European Open Source Achievement Award. The physical manifestation of that prize was a trophy made of translucent acrylic (or something similar). The blog post I above has a short video where I show it off. In the year that passed since, we have established an organiza...
NSA released new guidelines to help organizations achieve target-level Zero Trust maturity
Multi-factor authentication (MFA) is supposed to defend against phishing attacks, but threat actors operating under the ShinyHunters banner are using it as a pretext in ongoing social engineering attacks aimed at bypassing it. Among those successfully targeted in these latest hacking spree are Paner...
Session 11A: Blockchain Security 2
Authors, Creators & Presenters: Anqi Tian (Institute of Software, Chinese Academy of Sciences; School of Computer Science and Technology, University of Chinese Academy of Sciences), Peifang Ni (Institute of Software, Chinese Academy of Sciences; Zhongguancun L...
Microsoft has announced a three-phase approach to phase out New Technology LAN Manager (NTLM) as part of its efforts to shift Windows environments toward stronger, Kerberos-based options.
The development comes more than two years after the tech giant revealed its plans to deprecate the legacy techno...
Fake high-yield investment platforms are surging worldwide, promising "guaranteed" returns that mask classic Ponzi schemes.CTM360 explains how HYIP scams scale through social media, recycled templates, and referral abuse. [...]
In 2022, Wordfence introduced a completely free vulnerability database to support the WordPress security community. We made sure that included completely free access to the Wordfence Intelligence Vulnerability Database API on the founded belief that WordPress vulnerability information should be free...
Hackers rely on evolved vishing and login harvesting to compromise SSO credentials for unauthorized MFA enrollment.
The post ShinyHunters-Branded Extortion Activity Expands, Escalates appeared first on SecurityWeek.
A supply chain attack on Notepad++ update process was linked to compromised hosting infrastructure