> TODAY'S SUMMARY (4 articles)
Today's cybersecurity highlights include a significant data breach involving СберСпасибо, with 3,288,711 accounts compromised. Microsoft has issued its November 2026 Patch Tuesday update, addressing 1,328 vulnerabilities, including 60 rated as critical, emphasizing the need for urgent patching. Additionally, a critical remote code execution vulnerability has been identified in Ruflo MCP Bridge version 3.16.2, posing serious risks to affected systems. Organizations are advised to prioritize updates and monitor for potential exploitation of these vulnerabilities. Overall, the cybersecurity landscape remains fraught with threats, underscoring the importance of robust security measures.
|
// AI-powered summary generated at 04:00
UAT-10027 campaign is targeting U.S. education and healthcare sectors to deploy a new Dohdoor backdoor. Cisco Talos has identified a new threat cluster, tracked as UAT-10027, targeting U.S. education and healthcare organizations since at least December 2025 to deploy a previously unseen backdoor nam...
In this edition of the Threat Source newsletter, William draws parallels between Shakespeare’s Hotspur and the challenges of cybersecurity and AI, emphasizing the importance of risk-taking, learning from failure, and surrounding yourself with smart people.
APT stands for Advanced Persistent Threat. But what does that actually mean, and how does it translate into the kind of threat you’re facing?
Most breaches don’t start with malware or zero-day exploits. They start with a login. An attacker gets hold of a password, maybe through phishing, reuse, or a leaked credential dump. They test it against a remote system. An SSH prompt appears. The credentials work. From there, everything unfolds qu...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de clôture de la procédure initiée à l'encontre d'une professionnelle de santé concernant un accès illicite présumé à un dossier médical. Cette affaire débute par une plainte déposée par un membre du personnel hospitalier, sus...
AttackIQ has released a new attack graph that emulates the behaviors of LokiLocker ransomware, a .NET based strain active since at least mid-August 2021. The malware combines defense evasion and impact techniques, including disabling Task Manager and Windows Firewall, as well as deleting Volume Shad...
L'Agence croate pour la protection des données personnelles (AZOP) a accueilli une délégation de son homologue kosovare pour renforcer leur coopération en matière de protection des données.Le 25 février 2026, une visite de travail a permis de faire le bilan d'un programme de détachement et d'échange...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de A.A.A., comprenant le prononcé d'une amende de 1 000 €, pour des manquements en lien avec la sécurité des données personnelles. Cette affaire débute par une plainte d'une patiente signalant avoir...
In our opinion, Gartner’s 2026 research reflects this broader evolution. Identity has expanded beyond perimeter controls and point-in-time authentication to encompass verification of the human, contextual risk assessment, and automated trust decisions.
The post The 2026 CISO Mandate: Proactive...
L'Autorité nationale de surveillance du traitement des données à caractère personnel (ANSPDCP) a publié une décision de sanction à l'encontre du responsable du traitement MEDCENTER SRL, comprenant une amende de 149 319 lei (environ 30 000 €) et un avertissement, pour des manquements liés à la sécuri...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de BLEISOR SOLUTIONS, S.A.S. comprenant le prononcé d'une amende de 600 € pour des manquements en lien avec l'obstruction à ses pouvoirs d'enquête. Cette affaire débute par une plainte qui a conduit à...
The devices have been added to the NATO Information Assurance Product Catalogue (NIAPC).
The post Apple iPhone and iPad Cleared for Classified NATO Use appeared first on SecurityWeek.
Cybersecurity researchers have disclosed details of a new botnet loader called Aeternum C2 that uses a blockchain-based command-and-control (C2) infrastructure to make it resilient to takedown efforts.
"Instead of relying on traditional servers or domains for command-and-control, Aeternum stores its...
AWS Security Hub Extended is a plan within Security Hub that simplifies how customers procure, deploy, and integrate a full-stack enterprise security solution across endpoint, identity, email, network, data, browser, cloud, AI, and security operations. The plan allows customers to expand their secur...
A Greek court sentenced the founder of the Intellexa Consortium and three associates to prison for their role in a sprawling spyware scandal that has dominated Greek headlines since it came to light in 2022.
Trend Micro has patched two critical Apex One vulnerabilities that allow attackers to gain remote code execution (RCE) on vulnerable Windows systems. [...]
Compliance expectations across SMB markets are rising as supply chain regulations and cyber insurance requirements raise the baseline for security maturity. Regulatory standards such as CIS Controls v8, the NIS2 Directive, ISO 27001, SOC 2, PCI DSS, HIPAA, Cyber Essentials, CMMC 2.0, DORA, and...
DIY store chain ManoMano is notifying customers of a data breach personal data, which was caused by hackers compromising a third-party service provider. [...]
The goal isn’t about preventing every attack but about keeping the business running when attacks succeed.
The post Four Risks Boards Cannot Treat as Background Noise appeared first on SecurityWeek.
AI threat modeling helps teams identify misuse, emergent risk, and failure modes in probabilistic and agentic AI systems.
The post Threat modeling AI applications appeared first on Microsoft Security Blog.