> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, a China-aligned hacking group used agentic AI to compromise over 2,250 Microsoft 365 tenants through a breach of the ConnectWise cloud backup application. In addition, two unpatched critical PHP remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have been actively exploited, prompting urgent security alerts and emergency patches from PHP developers. Other significant updates include Cisco addressing 34 vulnerabilities and Fortinet urging immediate updates for critical flaws in their products. The ongoing trend of AI integration in security and development processes is leading to new vulnerabilities and challenges, as evidenced by increasing incidents of exploitation before official disclosures.
|
// AI-powered summary generated at 12:00
Microsoft announced that it will disable the 30-year-old NTLM authentication protocol by default in upcoming Windows releases due to security vulnerabilities that expose organizations to cyberattacks. [...]
Google's dual-purpose crawler creates an unfair AI advantage. To protect publishers and foster competition, the UK’s Competition and Markets Authority must mandate crawler separation for search and AI.
The Polish government accused a Russian government hacking group of hacking into energy facilities taking advantage of default usernames and passwords.
The latest phase of the global law enforcement action resulted in seizing three industrial-scale illegal IPTV services. [...]
A comprehensive developer guide to implementing secure authentication in modern applications. Covers OAuth 2.0, OIDC, passwordless authentication, passkeys, and enterprise SSO with production-ready code examples.
The post The Complete Guide to Authentication Implementation for Modern Applications ap...
Seoul Metropolitan Police, as part of their investigation into the data breach at online retail giant Coupang, brought in acting CEO Harold Rogers.
Session 10D: Machine Unlearning
Authors, Creators & Presenters: Derui Wang (CSIRO's Data61), Minhui Xue (CSIRO's Data61), Bo Li (The University of Chicago), Seyit Camtepe (CSIRO's Data61), Liming Zhu (CSIRO's Data61)
PAPER
Provably Unlearnable Data Examples
The exploitation of publicly accessib...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Padata parallel execution mechanism;
- Netfilter;
(CVE-2022-49698, CVE-2025-21726, CVE-2025...
CrowdStrike assessed that two new threat actor groups have spun off from North Korean Labyrinth Chollima hackers
The actions impaired some of IPIDEA’s proxy infrastructure, but not all of it. The effort underscores the back-and-forth struggle of taking out pieces of cybercriminals’ vast and growing infrastructure.
The post Google’s disruption rips millions out of devices out of malicious network appeared first...
From an Anthropic blog post:
In a recent evaluation of AI models’ cyber capabilities, current Claude models can now succeed at multistage attacks on networks with dozens of hosts using only standard, open-source tools, instead of the custom tools needed by previous generations. This illustrates how...
The trends that emerged in January offer useful clues about the risks and priorities that security teams are likely to contend with throughout the year
Aisy has emerged from stealth mode with $2.3 million in seed funding for its AI-assisted platform.
The post Aisy Launches Out of Stealth to Transform Vulnerability Management appeared first on SecurityWeek.
In the race to innovate, software has repeatedly reinvented how we define identity, trust, and access. In the 1990's, the web made every server a perimeter. In the 2010's, the cloud made every identity a workload. Here in 2026, agentic AI makes every action autonomous.Â
The post Agentic AI and Non‑H...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Padata parallel execution mechanism;
- Netfilter;
(CVE-2022-49698, CVE-2025-21726, CVE-2025...
Microsoft has fixed a known issue that prevented Microsoft 365 customers from opening encrypted emails in classic Outlook after a recent update. [...]
Municipales 2026 : la CNIL serre la vis sur le ciblage politique et lance un dispositif de signalement....
Among them, 23,000 hosts were persistently responsible for the majority of activity observed over 293 days of scanning.
The post 175,000 Exposed Ollama Hosts Could Enable LLM Abuse appeared first on SecurityWeek.
ShinyHunters claims to have stolen millions of records from Match Group dating apps and Panera Bread, with very different consequences for users.
ESET PROTECT version 7.0 has been released.