> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, a China-aligned hacking group used agentic AI to compromise over 2,250 Microsoft 365 tenants through a breach of the ConnectWise cloud backup application. In addition, two unpatched critical PHP remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have been actively exploited, prompting urgent security alerts and emergency patches from PHP developers. Other significant updates include Cisco addressing 34 vulnerabilities and Fortinet urging immediate updates for critical flaws in their products. The ongoing trend of AI integration in security and development processes is leading to new vulnerabilities and challenges, as evidenced by increasing incidents of exploitation before official disclosures.
|
// AI-powered summary generated at 12:00
How Can Least Privilege Transform Secure Cloud Operations? Have you ever pondered the repercussions of over-privileged access in cloud environments? With the rapid adoption of cloud technologies, the concept of least privilege has emerged when a cornerstone for secure cloud operations. This principl...
Le Conseil d’État a rejeté le recours de la commune de Nice contre un avis de la Commission nationale de l’informatique et des libertés (CNIL) qui jugeait illégal un dispositif de vidéosurveillance algorithmique aux abords des écoles.La Commission nationale de l’informatique et des libertés (CNIL) a...
An FBI informant said in 2017 that Jeffrey Epstein had a “personal hacker,” according to a Justice Department document released Friday. An FBI informant said in 2017 that Jeffrey Epstein had a “personal hacker,” according to one of the documents released by the Department of Justice (DoJ) as part of...
A U.S. federal jury has convicted Linwei Ding, a former software engineer at Google, for stealing AI supercomputer data from his employer and secretly sharing it with Chinese tech firms. [...]
Over the past few months, a large-scale cloud storage subscription scam campaign has been targeting users worldwide with repeated emails falsely warning recipients that their photos, files, and accounts are about to be blocked or deleted due to an alleged payment failure. [...]
New expat packages are available for Slackware 15.0 and -current to fix security issues.
Session 11A: Blockchain Security 2
Authors, Creators & Presenters: Ye Liu (Singapore Management University), Yue Xue (MetaTrust Labs), Daoyuan Wu (The Hong Kong University of Science and Technology), Yuqiang Sun (Nanyang Technological University), Yi Li (Nanyang Technological University), Miaol...
Mandiant says a wave of recent ShinyHunters SaaS data-theft attacks is being fueled by targeted voice phishing (vishing) attacks and company-branded phishing sites that steal single sign-on (SSO) credentials and multi-factor authentication (MFA) codes. [...]
Hackers compromised a MicroWorld Technologies update server and fed a malicious file to eScan customers.
The post eScan Antivirus Delivers Malware in Supply Chain Attack appeared first on SecurityWeek.
A researcher has released detailed evidence showing some Instagram private accounts exposed photo links to unauthenticated visitors. The issue was later fixed, but Meta closed the report as not applicable and did not respond to multiple requests for comment. [...]
Multiple security issues were found in Django, a Python web development framework, which could result in SQL injection, directory traversal or denial of service. For the stable distribution (trixie), these problems have been fixed in version 3:4.2.27-0+deb13u1.
A Farsi-speaking threat actor aligned with Iranian state interests is suspected to be behind a new campaign targeting non-governmental organizations and individuals involved in documenting recent human rights abuses.
The activity, observed by HarfangLab in January 2026, has been codenamed RedKitten....
Plus: AI agent OpenClaw gives cybersecurity experts the willies, China executes 11 scam compound bosses, a $40 million crypto theft has an unexpected alleged culprit, and more.
CERT Polska said cyberattacks hit 30+ wind and solar farms, a manufacturer, and a major CHP plant supplying heat to nearly 500,000 people. On December 29, 2025, Poland faced coordinated cyberattacks targeting over 30 wind and solar farms, a manufacturing company, and a major heat and power plant ser...
Filming federal agents in public is legal, but avoiding a dangerous—even deadly—confrontation isn’t guaranteed. Here’s how to record ICE and CBP agents as safely as possible and have an impact.
Kaspersky Unified Monitoring and Analysis Platform, version 4.2: detecting compromised accounts using AI, updated correlator, and other innovations.
The FBI has seized control of RAMP, a notorious cybercrime online forum that bragged to be the only place that allowed ransomware, and boasted over 14,000 active users.
Now some of those users' details are likely to be in the hands of the police...
Read more in my article on the Bitdefender bl...
Le warez n'est pas mort ! Washington coupe l’accès à trois géants du piratage de films, de musique et de livres....
※この記事は自動翻訳されています。正確な内容につきましては原文をご参照ください。 要約 米財務省外国資産管理局（OFAC）は、英国籍の暗号資産取引所 Zedcex と Zedxion を、イランの金融部門で事業を行い、イラン革命防衛隊（IRGC）向けの暗号資産トランザクションを処理していたとして制裁指定しました。 今回の措置で...
Google-owned Mandiant on Friday said it identified an "expansion in threat activity" that uses tradecraft consistent with extortion-themed attacks orchestrated by a financially motivated hacking group known as ShinyHunters.
The attacks leverage advanced voice phishing (aka vishing) and bogus credent...