> TODAY'S SUMMARY (125 articles)
Today's cybersecurity news highlights several critical threats and vulnerabilities. The PHP Foundation has issued emergency patches for two severe remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively termed PHP2Shell, which are being actively exploited; website owners are urged to update immediately. Additionally, a new phishing-as-a-service platform, Athena StealthRoute, utilizes AI to generate deceptive lures, indicating a growing trend in AI-assisted cybercrime. Meanwhile, ransomware attacks are surging, with rival gangs evolving their tactics to exploit various vulnerabilities. The U.S. government has mandated the removal of DeepSeek AI products from federal systems due to security risks. Overall, the landscape is marked by rapid exploitation of vulnerabilities and the increasing sophistication of cyber threats.
|
// AI-powered summary generated at 16:01
Ring says the new feature will identify if video edits have been made, even if they're minor.
Amit Sheps, head of product marketing at CyCognito, discusses the growing challenges cybersecurity teams face as artificial intelligence accelerates the expansion of enterprise attack surfaces. He explains why visibility, continuous assessment, and proactive risk management are becoming essential i...
A new Android click-fraud trojan family uses TensorFlow ML to visually detect and tap ads, bypassing traditional script-based click techniques. Researchers at cybersecurity firm Dr.Web discovered a new Android click-fraud trojan family that uses TensorFlow.js ML models to visually detect and tap ads...
Logging in, not breaking in Unknown attackers are abusing Microsoft SharePoint file-sharing services to target multiple energy-sector organizations, harvest user credentials, take over corporate inboxes, and then send hundreds of phishing emails from compromised accounts to contacts inside and outsi...
The developer of the popular curl command-line utility and library announced that the project will end its HackerOne security bug bounty program at the end of this month, after being overwhelmed by low-quality AI-generated vulnerability reports. [...]
In this week's newsletter, Bill hammers home the old adage, "Know your environment" — even throughout alert fatigue.
The case dates to May 2022, when the court launched a probe into the alleged spying on devices belonging to Prime Minister Pedro Sánchez and Defence Minister Margarita Robles.
Hackers began exploiting an authentication bypass vulnerability in SmarterTools' SmarterMail email server and collaboration tool that allows resetting admin passwords. [...]
La Commission Nationale de l'Informatique et des Libertés (CNIL) a initié une concertation en vue d'élaborer une recommandation sur la preuve du consentement dans le secteur du marketing.Cette démarche répond aux interrogations récurrentes des professionnels sur les exigences applicables à la preuve...
TL;DR Crypto-enabled fraud cost victims at least $14 billion globally in 2025, with sophisticated scams like pig butchering and AI-powered…
The post Why Now is the Time for the UK to Lead the Global Fight against Crypto-enabled Fraud appeared first on Chainalysis.
Several security issues were fixed in libxml2.
Depuis le 15 janvier 2026, une vague d'attaques automatisées a été observée : des firewalls Fortinet sont piratés et les configurations FortiGate volées.
Le post FortiCloud SSO : des firewalls Fortinet piratés, des configurations volées ! a été publié sur IT-Connect.
Miami, Florida, 22nd January 2026, CyberNewsWire
The post Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time appeared first on Security Boulevard.
Cybersecurity researchers have disclosed details of a new ransomware family called Osiris that targeted a major food service franchisee operator in Southeast Asia in November 2025.
The attack leveraged a malicious driver called POORTRY as part of a known technique referred to as bring your own vulne...
The alleged risks of being publicly identified have not stopped DHSÂ and ICE employees from creating profiles on LinkedIn, even as Kristi Noem threatens to treat revealing agents' identities as a crime.
The incidents occurred amid Gaza protests and suggest human rights violations, Citizen Lab said.
The post Researchers find Jordan government used Cellebrite phone-cracking tech against activists appeared first on CyberScoop.
Britain’s House of Lords voted by an overwhelming margin to ban children under age 16 from accessing social media, setting up a vote on the law in the House of Commons.
Tutoriel Scanopy : apprenez à installer ce scanner réseau via Docker afin de générer une topologie de vos actifs (serveurs, firewalls...) en quelques minutes.
Le post Installation de Scanopy : cet outil open source génère les diagrammes réseau à votre place a été publié sur IT-Connect.
Discover how Ford, Icertis, and TriNet modernized security with Microsoft—embedding Zero Trust, automating defenses, and enabling secure AI innovation at scale.
The post Microsoft Security success stories: Why integrated security is the foundation of AI transformation appeared first on Microsoft Sec...
The Irish government announced that it wants to pass a law that would grant police more surveillance powers, such as using spyware to fight serious crime, while aiming to protect the privacy rights of its citizens.