> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several significant threats and trends. An attacker leveraged 4,837 hijacked GitHub accounts to deploy a secret stealer in over 1,800 repositories, underscoring the risks associated with compromised credentials. Poland's national e-government platform was taken offline following a cyberattack, disrupting public services. A critical vulnerability in Apache HTTP Server's HTTP/2 module could allow remote code execution, emphasizing the need for prompt patching. Additionally, threat actors exploited stolen AI credentials to generate $740,000 in free compute resources, indicating the increasing value of AI tokens in cybercrime. Finally, unauthorized access incidents linked to ScreenConnect affected 288 endpoints across 48 organizations, prompting security measures from ConnectWise.
|
// AI-powered summary generated at 08:00
OpenAI and Google, along with Elon Musk’s xAI, also have contracts to supply their AI models to the military.
The post Trump Orders All Federal Agencies to Phase Out Use of Anthropic Technology appeared first on SecurityWeek.
Healthcare is the most targeted industry for cyberattacks, and ransomware-related delays in care have been linked to patient deaths. D3 Morpheus gives healthcare SOC teams an AI-autonomous platform that correlates alerts across the entire security stack, identifies ransomware kill chains in progress...
Google Cloud API keys, normally used as simple billing identifiers for APIs such as Maps or YouTube, could be scraped from websites to give access to private Gemini AI project data, researchers from Truffle Security recently discovered.
According to a Common Crawl scan of w...
Aeternum botnet uses Polygon blockchain smart contracts for C&C, making its infrastructure harder to detect and disrupt. Qrator Labs researchers uncovered Aeternum, a botnet that runs its command-and-control infrastructure through smart contracts on the Polygon blockchain. By decentralizing its...
Microsoft is rolling out new Windows 11 Insider Preview builds that improve security and performance during batch file or CMD script execution. [...]
Session 14A: Software Security: Applications & Policies
Authors, Creators & Presenters: All From The Institute of Information Engineering, Chinese Academy of Sciences: Lifang Xiao, Hanyu Wang, Aimin Yu, Lixin Zhao, Dan Meng
PAPER
CASPR: Context-Aware Security Policy Recommendation
Nowadays,...
Who is knocking at the Dohdoor? Digital intruders with possible links to North Korea have been infecting US education and healthcare sectors with a never-before-seen backdoor since at least December, according to security researchers.…
North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance. [...]
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
An AI-powered toy left 50,000 children’s chat transcripts exposed. Here’s what the incident reveals about data collection, storage, and the risks for kids.
On Feb. 20, the cybersecurity market experienced a structural tremor. Anthropic released Claude Code Security, pointing its Claude Opus 4.6 and million-token context window at the industry’s most “vetted” codebases. This is a significant change from standard pattern-matching against known signature...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de IMMUCURA MED, S.L. (comprenant le prononcé d'une amende de 20 000 €) pour des manquements en lien avec son obligation de coopération avec l'autorité de contrôle. Cette affaire débute par une plainte...
L'Agence espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de MODEL REYNA, C.B., comprenant le prononcé d'une amende de 3 000 €, pour des manquements en lien avec son obligation de coopération avec l'autorité. Cette affaire débute par une plainte.L’enquête men...
A yearlong Europol-coordinated operation dubbed "Project Compass" has led to 30 arrests and 179 suspects being tied to "The Com," an online cybercrime collective that targets children and teenagers. [...]
Le Garant pour la protection des données personnelles (GPDP) italien a publié une décision de sanction à l'encontre de Lex Iuris S.r.l. (comprenant le prononcé d'une amende de 15 000 €) pour des manquements en lien avec l'envoi de communications promotionnelles et le non-respect des droits des perso...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la commune d'Aversa, comprenant le prononcé d'une amende de 3 000 €, pour des manquements en lien avec la désignation et la publication des coordonnées de son délégué à la protection des données....
The U.S. Department of Justice (DoJ) this week announced the seizure of $61 million worth of Tether that were allegedly associated with bogus cryptocurrency schemes known as pig butchering.
The confiscated funds were traced to cryptocurrency addresses used for the laundering of criminally derived pr...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'entreprise individuelle XX (comprenant le prononcé d'une amende de 1 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance. Cette affaire débute par un signale...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de l'épicerie Alimentari San Rocco de XX, comprenant le prononcé d'une amende de 2 000 €, pour des manquements en lien avec son système de vidéosurveillance. Cette affaire débute par un signalement d...