> TODAY'S SUMMARY (46 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Notably, a China-aligned hacking group used agentic AI to compromise over 2,250 Microsoft 365 tenants through a breach of the ConnectWise cloud backup application. In addition, two unpatched critical PHP remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619) have been actively exploited, prompting urgent security alerts and emergency patches from PHP developers. Other significant updates include Cisco addressing 34 vulnerabilities and Fortinet urging immediate updates for critical flaws in their products. The ongoing trend of AI integration in security and development processes is leading to new vulnerabilities and challenges, as evidenced by increasing incidents of exploitation before official disclosures.
|
// AI-powered summary generated at 12:00
Deploy multiple Workers under a single domain with the ability to make them feel like single-page applications. We take a look at how service bindings enable URL path routing to multiple projects.
IntroductionÂ
Mandiant has identified an expansion in threat activity that uses tactics, techniques, and procedures (TTPs) consistent with prior ShinyHunters-branded extortion operations. These operations primarily leverage sophisticated voice phishing (vishing) and victim-branded credential harvest...
Introduction
Mandiant is tracking a significant expansion and escalation in the operations of threat clusters associated with ShinyHunters-branded extortion. As detailed in our companion report, 'Vishing for Access: Tracking the Expansion of ShinyHunters-Branded SaaS Data Theft', these campaigns lev...
Bumble and Match said they each recently responded to network intrusions. The group ShinyHunters claimed to have stolen data from both.
srcset="https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_2667391403.png?quality=50&strip=all 2500w, https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_2667391403.png?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
Cybersecurity researchers have discovered malicious Google Chrome extensions that come with capabilities to hijack affiliate links, steal data, and collect OpenAI ChatGPT authentication tokens.
One of the extensions in question is Amazon Ads Blocker (ID: pnpchphmplpdimbllknjoiopmfphellj), which clai...
Google Disrupts IPIDEA â One of the Worldâs Largest Residential Proxy Networks Google announced on Wednesday that it worked together with other partners to disrupt IPIDEA, which it described as one of the largest residential proxy networks in the world. The company took legal action to take down doz...
Cette semaine, lâactu cyber explose avec le retour des ShinyHunters, une fuite monumentale de 6 milliards dâidentifiants rĂ©vĂ©lĂ©e par le service veille ZATAZ, et des tensions croissantes autour de la protection du dĂ©bat numĂ©rique Ă lâapproche des municipales de 2026....
APIs are one of the most important technologies in digital business ecosystems. And yet, the responsibility for their security often falls to AppSec teams â and thatâs a problem. This organizational mismatch creates systemic risk: business teams assume APIs are âsecured,â while attackers exploit lo...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Two Biden-era memorandums have been revoked, but some of the resources they provide can still be used by government organizations.Â
The post White House Scraps âBurdensomeâ Software Security Rules appeared first on SecurityWeek.
An Android malware campaign is reportedly abusing Hugging Faceâs public hosting infrastructure to distribute a remote access trojan (RAT). The operation relies on social engineering, staged payload delivery, and abuse of Android permissions to achieve persistence over infected...
0APT, nouveau groupe de pirates informatiques : 71 intrusions en 48 h. ZATAZ a pu les rencontrer dans le darkweb....
Cybersecurity researchers have discovered a new campaign attributed to a China-linked threat actor known as UAT-8099 that took place between late 2025 and early 2026.
The activity, discovered by Cisco Talos, has targeted vulnerable Internet Information Services (IIS) servers located across Asia, but...
Microsoft has released the KB5074105 preview cumulative update for Windows 11 systems, which includes 32 changes, including fixes for sign-in, boot, and activation issues. [...]
Last year, our engineers submitted over 375 pull requests that were merged into nonâTrail of Bits repositories, touching more than 90 projects from cryptography libraries to the Rust compiler.
This work reflects one of our driving values: âshare what others can use.â The measure isnât whether you sh...
The RedKitten campaign distributes lures designed to target people seeking information about missing persons or political dissidents in Iran
Microsoft has updated the timeline for transitioning the Microsoft Sentinel experience from the Azure portal to the Microsoft Defender portal from July 1, 2026 to March 31, 2027. The updated schedule extends access by nearly nine months. Microsoft said the updated timeline reflects feedback from cus...
SmarterTools fixed two SmarterMail flaws, including a critical bug (CVE-2026-24423) that could allow arbitrary code execution. SmarterTools fixed two security bugs in its SmarterMail email software, including a critical vulnerability, tracked as CVE-2026-24423 (CVSS score of 9.3) that could let atta...