> TODAY'S SUMMARY (125 articles)
Today's cybersecurity news highlights several critical threats and vulnerabilities. The PHP Foundation has issued emergency patches for two severe remote code execution vulnerabilities (CVE-2026-109618 and CVE-2026-109619), collectively termed PHP2Shell, which are being actively exploited; website owners are urged to update immediately. Additionally, a new phishing-as-a-service platform, Athena StealthRoute, utilizes AI to generate deceptive lures, indicating a growing trend in AI-assisted cybercrime. Meanwhile, ransomware attacks are surging, with rival gangs evolving their tactics to exploit various vulnerabilities. The U.S. government has mandated the removal of DeepSeek AI products from federal systems due to security risks. Overall, the landscape is marked by rapid exploitation of vulnerabilities and the increasing sophistication of cyber threats.
|
// AI-powered summary generated at 16:01
Here’s how the most common scams targeting Apple Pay users work and what you can do to stay one step ahead
A new security flaw in SmarterTools SmarterMail email software has come under active exploitation in the wild, two days after the release of a patch.
The vulnerability, which currently does not have a CVE identifier, is tracked by watchTowr Labs as WT-2026-0001. It was patched by SmarterTools on Jan...
Fixes were rolled out for over two dozen vulnerabilities, including critical- and high-severity bugs.
The post Atlassian, GitLab, Zoom Release Security Patches appeared first on SecurityWeek.
Blue Origin announced TerraWave, a satellite communications network designed to support enterprise, data center, and government users that rely on reliable connectivity for mission-critical operations. The network will provide symmetrical data speeds of up to 6 Tbps worldwide. The TerraWave architec...
It has just been a few weeks since reports emerged of the Christmas cyber attack suffered by the European Space Agency (ESA), and the situation has already become worse.
Read more in my article on the Hot for Security blog.
Cisco has released patches for CVE-2026-20045, a critical vulnerability that can be exploited for unauthenticated remote code execution.
The post Hackers Targeting Cisco Unified CM Zero-Day appeared first on SecurityWeek.
EaseUS announced EaseUS Disk Copy 7.0.0, representing a shift in how disk cloning and backup workflows are handled on Windows. The update introduces disk imaging–based backup and restore capabilities, allowing users to create disk image and restore them to physical storage without being constrained...
The title of this diary is perhaps a bit catchy but the question is important. I don't consider myself as a good developer. That's not my day job and I'm writing code to improve my daily tasks. I like to say “I'm writing sh*ty code! It works for me, no warranty that it will for for you”. Today,...
Exposure of Sensitive Information to an Unauthorized Actor in Copilot Studio allows a unauthenticated attacker to view sensitive information through network attack vector
Improper access control in Azure Resource Manager allows an authorized attacker to elevate privileges over a network.
Lesen Sie, warum CISOs den M365-Tenant stärker in den Blick nehmen müssen.IB Photography – shutterstock.com
Im Jahr 2010 war Office 365 eine einfache Suite mit Office-Anwendungen und zusätzlicher E-Mail-Funktion. Das hat sich 15 Jahre später mit Microsoft 365 geändert: Die S...
Improper access control in Azure Front Door (AFD) allows an unauthorized attacker to elevate privileges over a network.
Exposure of sensitive information to an unauthorized actor in Azure Data Explorer allows an unauthorized attacker to disclose information over a network.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw impacting Cisco Unified Communications products to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco Unified Communications products vulnerability, t...
Azure Entra ID Elevation of Privilege Vulnerability
Improper validation of specified type of input in M365 Copilot allows an unauthorized attacker to disclose information over a network.
Une campagne de phishing cible les utilisateurs du gestionnaire de mots de passe LastPass dans le but de voler le mot de passe maître de leur coffre-fort.
Le post Phishing : les pirates ciblent le mot de passe principal des utilisateurs de LastPass a été publié sur IT-Connect.
Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network.
Improper neutralization of escape, meta, or control sequences in Copilot allows an unauthorized attacker to disclose information over a network.
Kyu Neushwaistein discovered that telnetd from inetutils does not sanitize the USER environment variable before passing it on to login. A remote attacker can take advantage of this flaw to login as root, bypassing normal authentication processes. For the oldstable distribution (bookworm), this probl...