> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical issues. Oracle has released patches for over 1,200 vulnerabilities, including nearly 100 rated as critical, with significant updates to Fusion Middleware. The FBI and CISA report that SafePay ransomware has targeted over 600 organizations using stolen credentials and double extortion tactics. Additionally, vulnerabilities in PHP, particularly the PHP2Shell issues, are being actively exploited, emphasizing the need for immediate updates. Furthermore, a supply chain attack linked to China-based hackers has compromised ConnectWise's Cloud Backup application, illustrating ongoing threats from state-aligned actors. In privacy news, Meta faces a staggering $25 billion fine for deceiving users about privacy practices.
|
// AI-powered summary generated at 08:01
An LLMjacking operation has been targeting exposed LLMs and MCPs at scale, for commercial monetization.
The post LLMs Hijacked, Monetized in ‘Operation Bizarre Bazaar’ appeared first on SecurityWeek.
The Aisuru/Kimwolf botnet launched a new massive distributed denial of service (DDoS) attack in December 2025, peaking at 31.4 Tbps and 200 million requests per second. [...]
Microsoft issued an emergency patch for a flaw attackers are using to slip malicious code past Office’s document security checks.
The two bugs impacted n8n’s sandbox mechanism and could be exploited via weaknesses in the AST sanitization logic.
The post N8n Vulnerabilities Could Lead to Remote Code Execution appeared first on SecurityWeek.
Virtue AI announced AgentSuite, a multi-layer security and compliance platform for enterprise AI agents. Organizations worldwide are deploying agents that modify databases, trigger payments, and access systems containing sensitive information. AgentSuite is the AI-native platform built specifically...
The new security feature makes it more difficult for police and malicious hackers to obtain a person's precise location data from a cell phone company.
Microsoft plans to introduce a call reporting feature in Teams by mid-March, allowing users to flag suspicious or unwanted calls as potential scams or phishing attempts. [...]
AI toys have been found discussing knives, drugs, sex, and mature games with children. We dive into the latest research results and the risks to security and privacy.
Nisos
Employment Fraud & Hiring Risk: When Access Becomes Risk
Hiring has long been treated as an administrative function. Once a candidate clears background checks and completes onboarding, trust is assumed...
The post Employment Fraud & Hiring Risk: When Access Becomes Risk appeared first...
Microsoft has published three out-of-band (OOB) updates so far in January 2026. One of these updates was released to address a vulnerability, CVE-2026-21509, affecting Microsoft Office that has been reportedly exploited in the wild.Â
The update infrastructure for eScan antivirus, a product of Indian cybersecurity company MicroWorld Technologies, has been compromised by unknown attackers to deliver a persistent downloader to enterprise and consumer endpoints. The supply chain compromise also resulted in the eScan antivirus on tho...
This Moltbot impersonation campaign is a case study in supply-chain risk, brand hijacking, and what happens when open source goes viral.
Druva announced the launch of Threat Watch, a zero-touch, automated cloud-native solution for proactive threat monitoring of backup data. Threat Watch is designed to continuously scan backup snapshots to identify dormant threats and indicators of compromise (IOCs), empowering IT and security teams t...
As widespread crypto adoption continues to accelerate, MoonPay, the global leader in crypto payments with over 30 million users and…
The post MoonPay Scales Compliance Operations with Chainalysis and Unit21 Partnership appeared first on Chainalysis.
In its annual report released this week, Latvia’s national security service, SAB, said 2025 marked an all-time high in registered cyber threats targeting the country, with activity surging significantly past levels seen before Russia’s invasion of Ukraine in 2022.
France data protection authority CNIL has fined public employment agency France Travail €5 million for failing to ensure the security of personal data of job seekers. Attackers gained access to the organization’s systems through social engineering techniques that targeted accounts used by staff at C...
Moltworker is a middleware Worker and adapted scripts that allows running Moltbot (formerly Clawdbot) on Cloudflare's Sandbox SDK and our Developer Platform APIs. So you can self-host an AI personal assistant — without any new hardware.
MIND extends its data loss prevention platform to secure agentic AI, enabling organizations to discover, monitor, and govern AI agents in real time to prevent sensitive data exposure, shadow AI risks, and prompt injection attacks.
The post MIND Extends DLP Reach to AI Agents appeared first on Secur...
Apply fixes within a few hours or face the music, say the pros What good is a fix if you don't use it? Experts are urging security teams to patch promptly as vulnerability exploits now account for the majority of intrusions, according to the latest figures.…
Cyberkriminelle haben es inzwischen vermehrt auf digitale Identitäten abgesehen.khunkornStudio – shutterstock.com
Der State of Incident Response Report 2026 von Eye Security zeigt: Cyberangriffe auf Unternehmen erfolgen zunehmend unbemerkt und die Schäden entstehen innerhalb...