> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical issues. Oracle has released patches for over 1,200 vulnerabilities, including nearly 100 rated as critical, with significant updates to Fusion Middleware. The FBI and CISA report that SafePay ransomware has targeted over 600 organizations using stolen credentials and double extortion tactics. Additionally, vulnerabilities in PHP, particularly the PHP2Shell issues, are being actively exploited, emphasizing the need for immediate updates. Furthermore, a supply chain attack linked to China-based hackers has compromised ConnectWise's Cloud Backup application, illustrating ongoing threats from state-aligned actors. In privacy news, Meta faces a staggering $25 billion fine for deceiving users about privacy practices.
|
// AI-powered summary generated at 08:01
La municipalité de Bourg-Achard a été victime d'une cyberattaque le 29 janvier 2026, entraînant une fuite de données. Les autorités compétentes (CNIL, gendarmerie spécialisée, ANSSI/Normandie Cyber) ont été informées, et la ville a lancé un appel à la vigilance pour prévenir les fraudes.
A prolific initial access broker tracked as TA584 has been observed using the Tsundere Bot alongside XWorm remote access trojan to gain network access that could lead to ransomware attacks. [...]
A buffer overflow was discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed PSP images are opened. For the oldstable distribution (bookworm), this problem has been fixed in version 2.10.34-1+deb12u7...
OPNsense, the open-source firewall and network security platform, reached version 26.1, adding a range of updates affecting management, traffic visibility, automation interfaces, and core services. Changes in firewall management and APIs Version 26.1, code-named Witty Woodpecker, introduces revision...
Attackers have exploited the critical defect to reconfigure firewall settings, create unauthorized accounts with privileged access to multiple versions of the vendor’s security products.
The post Fortinet’s latest zero-day vulnerability carries frustrating familiarities for customers appeared first...
The coordinated attack on Poland's power grid in late December targeted multiple distributed energy resource (DER) sites across the country, including combined heat and power (CHP) facilities and wind and solar dispatch systems. [...]
How Secure Are Your Non-Human Identities? Imagine you’re managing a bustling airport, where travelers are constantly arriving and departing. Now, replace those travelers with machine identities, and you’re picturing the modern cloud environment. Non-Human Identities (NHIs) represent these machine id...
How Safe Are Autonomous Agents in Your Cloud Environment? Have you ever considered the security risks posed by autonomous agents in your organization’s cloud environment? With technology advances, the rise of machine identities or Non-Human Identities (NHIs) has become a focal point in contemporary...
The Senate Judiciary Committee held a hearing on Section 702, set to sunset at the end of April, but with no Trump administration witnesses present.
The post Lawmakers wonder when Trump administration will weigh on soon-expired surveillance powers appeared first on CyberScoop.
Are You Managing Your Non-Human Identities Effectively? Managing Non-Human Identities (NHIs) poses unique challenges for cybersecurity professionals. With the reliance on cloud services grows, so does the necessity for robust secrets management. Understanding the importance of NHIs—and how to protec...
Are Organizations Truly Safe Without Effective Non-Human Identity Management? The Growing Importance of Agentic AI in Platform Security How can organizations navigate the complex terrain of cybersecurity to ensure both human and machine identities are secure? The answer may lie within the burgeoning...
It was discovered that pyasn1, a generic ASN.1 library for Python, is prone to a denial of service vulnerability, which may result in memory exhaustion from malformed OID/RELATIVE-OID with excessive continuation octets. For the oldstable distribution (bookworm), this problem has been fixed
ICE has been using an AI-powered Palantir system to summarize tips sent to its tip line since last spring, according to a newly released Homeland Security document.
A Solutions Architect explores the harsh realities of de-identifying sensitive data by creating custom scripts, including the questions and complexities that arise along the way.
The post Data masking: DIY internal scripts or time to buy? appeared first on Security Boulevard.
The lawsuit accuses xAI seeking to “capitalize on the internet’s seemingly insatiable appetite for humiliating non-consensual sexual images.”Â
The post Undressed victims file class action lawsuit against xAI for Grok deepfakes appeared first on CyberScoop.
Cybercrime solved. The end Ransomware crims have just lost one of their best business platforms. US law enforcement has seized the notorious RAMP cybercrime forum's dark web and clearnet domains.…
Outtake makes an agentic cybersecurity platform to help enterprises detect identity fraud. Its angel investors read like a who's who of tech industry names.
MicroWorld Technologies, the maker of the eScan antivirus product, has confirmed that one of its update servers was breached and used to distribute an unauthorized update later analyzed as malicious to a small subset of customers earlier this month. [...]
Radware this week revealed it has acquired Pynt, a provider of a set of tools for testing the security of application programming interfaces (APIs). Uri Dorot, a senior product marketing manager for Radware, said that capability will continue to be made available as a standalone tool in addition to...
Security researchers are warning of insecure deployments in enterprise environments of the Moltbot (formerly Clawdbot) AI assistant, which can lead to leaking API keys, OAuth tokens, conversation history, and credentials. [...]