> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, a China-aligned hacking group used agentic AI to compromise over 2,250 Microsoft 365 tenants through a breach of the ConnectWise cloud backup application. In addition, two unpatched critical PHP remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have been actively exploited, prompting urgent security alerts and emergency patches from PHP developers. Other significant updates include Cisco addressing 34 vulnerabilities and Fortinet urging immediate updates for critical flaws in their products. The ongoing trend of AI integration in security and development processes is leading to new vulnerabilities and challenges, as evidenced by increasing incidents of exploitation before official disclosures.
|
// AI-powered summary generated at 12:00
CERT Polska, the Polish computer emergency response team, revealed that coordinated cyber attacks targeted more than 30 wind and photovoltaic farms, a private company from the manufacturing sector, and a large combined heat and power plant (CHP) supplying heat to almost half a million customers in t...
In January 2026, Panera Bread suffered a data breach that exposed 14M records. After an attempted extortion failed, the attackers published the data publicly, which included 5.1M unique email addresses along with associated account information such as names, phone numbers and physical addresses. Pan...
SOC teams keep asking how the AI SOC differs from traditional SOAR. Here's what Morpheus does differentlyâfrom integration maintenance to false negatives.
The post We Keep Hearing the Same Question: Morpheus (AI SOC) vs. Traditional SOAR appeared first on D3 Security.
The post We Keep Hearing the Sa...
L'hÎpital de l'université médicale du Japon a subi une attaque informatique, entraßnant la fuite de données personnelles de 13 000 patients et de 1 700 employés. Les informations compromises incluent des noms, des adresses, des numéros de téléphone et des dates de naissance. Les attaquants ont exigé...
Nacogdoches Memorial Hospital experienced a data security incident due to a cyber-attack, which may have compromised patients' personal and health information. The incident occurred on January 31, 2026, and the hospital has taken measures to strengthen its network security. There is no evidence that...
With any security framework, be it ISO 27001, FedRAMP, or CMMC, the goal is not to secure âyour business.â Itâs to secure sensitive and controlled information that your business handles. This is a fundamentally important way of looking at your security. Why does this matter? Itâs all about borders....
We detail our discovery of CVE-2025-0921. This privileged file system flaw in SCADA system Iconics Suite could lead to a denial-of-service (DoS) attack.
The post Privileged File System Vulnerability Present in a SCADA System appeared first on Unit 42.
Last month, while working on a WordPress cleanup case, a customer reached out with a strange complaint: their website looked completely normal to them and their visitors, but Google search results were showing something very different.
Instead of normal titles and descriptions, Google was displaying...
IT software company Ivanti released patches for its Endpoint Manager Mobile (EPMM) product to fix two new remote code execution vulnerabilities already under attack in the wild.
âWe are aware of a very limited number of customers whose solution has been exploited at the tim...
A new species of squid. pretends to be a plant:
Scientists have filmed a never-before-seen species of deep-sea squid burying itself upside down in the seafloorâa behavior never documented in cephalopods. They captured the bizarre scene while studying the depths of the Clarion-Clipperton Zone (CCZ),...
The hacker allegedly developed zero-day exploits and offensive cyber tools and sold them to several countries, including an unnamed central African government, the U.K., and the United States.
Consider yourselves compromised, experts warn Ivanti has patched two critical zero-day vulnerabilities in its Endpoint Manager Mobile (EPMM) product that are already being exploited, continuing a grim run of January security incidents for enterprise IT vendors.âŠ
Are You Overlooking Non-Human Identities in Cloud Security? Machine identities have emerged as critical components that require immediate attention and robust management. Where organizations increasingly rely on digital transformations and cloud environments, the security of Non-Human Identities (NH...
Why Are Non-Human Identities Crucial for Cloud Security? Does your organization fully understand the importance of Non-Human Identities (NHIs) in cybersecurity? With a crucial component of cloud security, managing these machine identities effectively can be the key to minimizing risks and ensuring r...
TL;DR OFAC designated two UK-registered crypto exchanges, Zedcex and Zedxion, for operating in Iranâs financial sector and processing cryptocurrency transactionsâŠ
The post OFAC Designates Iranian-Linked Crypto Exchanges in First-Ever Action Targeting Digital Asset Firms in Iranâs Financial Sector ap...
How Are Non-Human Identities Shaping Cloud Security? What does it take to bridge the gap between security and R&D teams when managing non-human identities in cloud environments? Non-human identities (NHIs) are pivotal in modern cybersecurity frameworks, acting as machine identities that ensure s...
How Does Agentic AI Revolutionize Healthcare Security? Are you prepared to explore the transformative power of Agentic AI in securing the healthcare industry? The intersection of artificial intelligence and cybersecurity has opened doors to innovative methodologies. This sector is under constant scr...
If thereâs one thing guaranteed to grab attention in the computer security world, itâs announcing yourself without fully explaining what it is you plan to do.
This week, the Linux world got a taste of this enigmatic marketing ploy with the launch out of stealth of Berlin-ba...
Session 11A: Blockchain Security 2
Authors, Creators & Presenters: Qiyang Song (Institute of Information Engineering, Chinese Academy of Sciences; School of Cyber Security, University of Chinese Academy of Sciences), Heqing Huang (Institute of Information Engineering, Chinese Academy of Science...
You can use AWS Directory Service for Microsoft Active Directory as your primary Active Directory Forest for hosting your usersâ identities. Your IT teams can continue using existing skills and applications while your organization benefits from the enhanced security, reliability, and scalability of...