> TODAY'S SUMMARY (125 articles)
Today's cybersecurity news highlights several critical threats and vulnerabilities. The PHP Foundation has issued emergency patches for two severe remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively termed PHP2Shell, which are being actively exploited; website owners are urged to update immediately. Additionally, a new phishing-as-a-service platform, Athena StealthRoute, utilizes AI to generate deceptive lures, indicating a growing trend in AI-assisted cybercrime. Meanwhile, ransomware attacks are surging, with rival gangs evolving their tactics to exploit various vulnerabilities. The U.S. government has mandated the removal of DeepSeek AI products from federal systems due to security risks. Overall, the landscape is marked by rapid exploitation of vulnerabilities and the increasing sophistication of cyber threats.
|
// AI-powered summary generated at 16:01
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
Une vulnérabilité a été découverte dans Broadcom Web Security Services Agent. Elle permet à un attaquant de provoquer une élévation de privilèges.
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
La Technische Universität (TU) Wien a subi une faille de sécurité dans son réseau informatique, entraînant la compromission de comptes et un accès potentiel à des données sensibles. Les systèmes informatiques de l'université sont actuellement limités et les employés ainsi que les étudiants doivent r...
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Les universités allemandes, dont l’Université des sciences appliquées d’Emden/Leer, font face à des attaques quotidiennes contre leurs systèmes informatiques, ce qui rend la prévention et la détection précoce essentielles. Le 23/01/2026, une attaque potentielle a été détectée et bloquée à temps, san...
La société Romina Mineralbrunnen GmbH a été victime d'une cyberattaque, ce qui a entraîné une perte de connectivité pour les e-mails et le réseau téléphonique fixe. La société a mis en place une hotline pour les cas urgents et les ventes peuvent être contactées via les représentants de vente. Les au...
Teach a crook to phish… Criminals can more easily pull off social engineering scams and other forms of identity fraud thanks to custom voice-phishing kits being sold on dark web forums and messaging platforms.…
Navia Benefit Solutions, Inc. suffered a data breach where an unauthorized actor accessed and potentially acquired certain information between December 22, 2025, and January 15, 2026. The information that could have been impacted includes name, date of birth, Social Security number, phone number, an...
MIAMI, Jan. 22, 2026, CyberNewswire — Halo Security, a leading provider of external attack surface management and penetration testing services, today announced it has successfully achieved SOC 2 Type II compliance following an extensive multi-month audit by Insight Assurance.… (more…)
The post News...
Computers with Telnet open are in immediate danger of being compromised due to a critical vulnerability that allows attackers to bypass authentication.
The Telnet remote access protocol has long been superseded by the more secure and encrypted SSH, but many IoT and embedded...
The update for python-urllib3 announced in DSA 6102-1 introduced a regression in the patch meant to address CVE-2026-21441 for the oldstable distribution (bookworm). Updated packages are now available to correct this issue. For the oldstable distribution (bookworm), this problem has been fixed
A security issue was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), this problem has been fixed in version 144.0.7559.96-1~deb12u1.
The Irish government plans to draft legislation that would make it legal for law enforcement to use spyware, Minister of Justice Jim O’Callaghan said.
Is Your Organization Ready to Scale NHIs Safely and Efficiently? Scaling Non-Human Identities (NHIs) is a complex endeavor, particularly in dynamic industries such as financial services, healthcare, and technology-driven sectors that rely heavily on cloud computing. Where NHIs serve as the backbone...
How Do Non-Human Identities Revolutionize Cloud Security? What are Non-Human Identities (NHIs), and why do they hold the key to revolutionizing cloud security for organizations across various industries? Understanding Non-Human Identities and Their Importance Safeguarding sensitive data requires mor...
Okta is warning about custom phishing kits built specifically for voice-based social engineering (vishing) attacks. BleepingComputer has learned that these kits are being used in active attacks to steal Okta SSO credentials for data theft. [...]
Are Non-Human Identities the Missing Link in Cybersecurity AI Reliability? Cybersecurity is an evolving field, constantly adapting to new threats and vulnerabilities. But have you considered how Non-Human Identities (NHIs) are shaping cybersecurity, especially regarding AI reliability? NHIs, essenti...