> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical threats and emerging trends. A significant focus is on the urgent need for PHP updates, with two critical remote code execution vulnerabilities (PHP2Shell) prompting mass exploitation fears; users are advised to apply emergency patches immediately. Additionally, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) warns of active exploitation of vulnerabilities in Plex Media Server, while reports reveal hackers are utilizing compromised UpdraftCentral keys to backdoor WordPress sites. AI continues to play a dual role in cyber threats, as malicious actors leverage AI-driven phishing tools and autonomous attacks, prompting researchers to develop countermeasures like "context bombs" to misdirect AI agents. Meanwhile, a $10 million initiative has been launched to enhance cybersecurity at under-resourced utilities, reflecting a growing awareness of the need for improved defenses across various sectors.
|
// AI-powered summary generated at 20:01
Authors, Creators & Presenters: Lingbo Zhao (Institute of Information Engineering, Chinese Academy of Sciences), Yuhui Zhang (Institute of Information Engineering, Chinese Academy of Sciences), Zhilu Wang (Institute of Information Engineering, Chinese Academy of Sciences), Fengkai Yuan (Institut...
IntroductionIn September 2025, Zscaler ThreatLabz identified two campaigns, tracked as Gopher Strike and Sheet Attack, by a threat actor that operates in Pakistan and primarily targets entities in the Indian government. In both campaigns, ThreatLabz identified previously undocumented tools, techniqu...
Cybersecurity researchers have discovered two malicious Microsoft Visual Studio Code (VS Code) extensions that are advertised as artificial intelligence (AI)-powered coding assistants, but also harbor covert functionality to siphon developer data to China-based servers.
The extensions, which have 1....
Key security controls to implement in your organization to protect against malicious AI agent behavior.
A major cyberattack that nearly cut electricity to half-a-million people in Poland last year was reportedly carried out by the Russia-linked hacking group Sandworm, which likely attempted to knock out systems using wiper malware.
Internet security watchdog Shadowserver tracks nearly 800,000 IP addresses with Telnet fingerprints amid ongoing attacks exploiting a critical authentication bypass vulnerability in the GNU InetUtils telnetd server. [...]
Crunchbase confirms a data breach after cybercrime group ShinyHunters claims to have stolen over 2 million personal records. Crunchbase confirmed a data breach after the cybercriminal group ShinyHunters claimed to steal over 2 million personal records from its systems. The group leaked a 402 MB comp...
Microsoft gave Windows users’ BitLocker encryption keys for to US law enforcement officers, providing access to encrypted data, according to a news report.
The US Federal Bureau of Investigation approached Microsoft with a search warrant in early 2025, seeking keys to unloc...
Apple has released a new version of its AirTag tracking accessory that extends its connectivity range and improves how items are located. The updated AirTag uses a second-generation Ultra Wideband chip, similar to the chip in the iPhone 17 lineup, to increase the distance at which Precision Finding...
Outlook users have reported difficulties with Microsoft’s January Patch Tuesday updates, forcing Microsoft, once again, to patch some of its patches.
Users reported that, after applying the January 13 Windows updates, some applications became unresponsive or encountered une...
Okta misconfigurations can quietly weaken identity security as SaaS environments evolve. Nudge Security shows six Okta security settings teams often overlook and how to fix them. [...]
Fortra researchers have discovered a new SEO poisoning operation known as “HaxorSEO”
Police seized devices and cryptocurrency in multiple raids aimed at an alleged assassins-for-hire platform, Romanian authorities said.
The European Commission has opened a new formal investigation into X under the Digital Services Act over risks linked to the deployment of its AI tool Grok in the EU. Regulators are examining whether X properly assessed and mitigated risks tied to the spread of illegal content following Grok’s intro...
The CNAPP company will use the fresh investment to scale its runtime-first cloud security offering across data, AI and code.
The post Upwind Raises $250 Million at $1.5 Billion Valuation appeared first on SecurityWeek.
Upwind has raised $250 million in Series B funding, bringing its total funding to $430 million. The round was led by Bessemer Venture Partners, with participation from Salesforce Ventures and Picture Capital. Existing investors include Greylock, Cyberstarts, Leaders Fund, Craft Ventures, TCV, Alta P...
Ads promised up to $35 an hour to watch videos. Instead, users were funneled into mobile games designed to drive spending and collect data.
Booz Allen Hamilton announced the general availability of Vellox Reverser, a malware reverse engineering and threat intelligence product designed to accelerate cyber defense. Built with a resilient agentic AI architecture, Vellox Reverser automates time-intensive in-depth malware analysis of the mos...
The weekend discussion about the next step of the Pall Mall Process revealed some of the topics rules-writers will have to weigh.
The post Industry, government, nonprofits weigh voluntary rules for commercial hacking tools appeared first on CyberScoop.
The defense mechanisms that NPM introduced after the 'Shai-Hulud' supply-chain attacks have weaknesses that allow threat actors to bypass them via Git dependencies. [...]