> TODAY'S SUMMARY (65 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The UK NCSC warns organizations to update systems using PHP due to critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that were leaked prior to an emergency patch release. Ransomware attacks are escalating, with groups like The Gentlemen and Qilin intensifying their tactics in a competitive landscape. Additionally, the CISA reports that the SafePay ransomware gang has breached over 600 critical infrastructure entities globally. Concerns around AI are growing, as its capabilities may empower less skilled attackers to conduct sophisticated exploits. Lastly, a significant flaw in Signal's calling library has emerged, which may allow ongoing eavesdropping after calls end, prompting users to update their apps.
|
// AI-powered summary generated at 12:01
How Can AI Revolutionize Cloud Security Management? How do organizations ensure that their cloud environments are not just secure but intelligently managed? The answer lies in understanding the potential of AI in cloud security. With machines become predominant players in our IT infrastructure, the...
How Do Non-Human Identities Strengthen AI Security Architectures? Is your organization fully prepared to handle the intricate demands of AI-driven systems? Non-Human Identities (NHIs) play a crucial role in securing AI architectures. By effectively managing these machine identities, organizations ca...
It was discovered that one of the rules in the OWASP ModSecurity Core Rule Set parsed some multipart requests incorrectly. For the oldstable distribution (bookworm), this problem has been fixed in version 3.3.4-1+deb12u1. For the stable distribution (trixie), this problem has been fixed in
The new system emerges after repeated funding crises exposed the fragility of the 25-year-old CVE program that cybersecurity defenders worldwide depend on.
The post GCVE launches as a decentralized system for tracking software vulnerabilities appeared first on CyberScoop.
The House Homeland Security Committee grilled Madhu Gottumukkala, the acting director of the agency, over cutbacks both broad and specific.
The post Lawmakers probe CISA leader over staffing decisions appeared first on CyberScoop.
PcComponentes, a major technology retailer in Spain, has denied claims of a data breach on its systems impacting 16 million customers, but confirmed it suffered a credential stuffing attack. [...]
BOSTON, Jan. 21, 2026, CyberNewswire — Reflectiz today announced the release of its 2026 State of Web Exposure Research, revealing a sharp escalation in client?side risk across global websites, driven primarily by third?party applications, marketing tools, and unmanaged digital … (more…)
The post N...
In July 2025, Ingram Micros suffered devastating consequences from a ransomware in which the IT distributor’s logistics were paralyzed for a week.
It has now emerged that sensitive data was also leaked. As Ingram Micro confirmed in a mandatory filing with US authorities, mo...
Oracle has handed security teams their first big patching workload of the year, with its latest quarterly update containing a hefty 337 security fixes across its product range, including 27 rated critical.
This imposing number of patches won’t surprise anyone whose job it i...
Session 9D: Github + OSN Security
Authors, Creators & Presenters: Jian Cui (Indiana University), Hanna Kim (KAIST), Eugene Jang (S2W Inc.), Dayeon Yim (S2W Inc.), Kicheol Kim (S2W Inc.), Yongjae Lee (S2W Inc.), Jin-Woo Chung (S2W Inc.), Seungwon Shin (KAIST), Xiaojing Liao (Indiana University)...
CVE-2025-59718, a critical authentication bypass flaw that attackers exploited in December 2025 to compromise FortiGate appliances, appears to persist in newer, purportedly fixed releases of the underlying FortiOS. According to Fortinet, CVE-2025-59718 had been fixed in FortiOS versions 7.6.4 or abo...
Le Comité européen de la protection des données (EDPB) et le Contrôleur européen de la protection des données (EDPS) ont adopté un avis conjoint sur la proposition de la Commission européenne relative au "Digital Omnibus", soutenant la simplification de la mise en œuvre de la législation sur l’intel...
Le président de l'autorité polonaise de protection des données (UODO) a contesté la décision du parquet de classer sans suite une enquête concernant l'installation d'une vidéosurveillance dans la salle de réanimation d'un hôpital.L'enquête, initiée suite à une information du Médiateur, portait sur u...
Zoom addressed a critical security vulnerability, tracked as CVE-2026-22844, that could result in remote code execution. Cloud-based video conferencing and online collaboration platform Zoom released security updates to address multiple vulnerabilities, including command injection, tracked as CVE-20...
L'autorité espagnole de protection des données a aujourd'hui publié une décision de sanction à l'encontre de A.A.A. (comprenant le prononcé d'une amende de 2 000 €) pour des manquements en lien avec son système de vidéosurveillance.Cette affaire débute par une plainte d'une ancienne employée, signal...
Cisco has fixed a critical remote code execution vulnerability (CVE-2026-20045) in some of its unified communications solutions that’s being targeted by attackers in the wild, the company announced on Wednesday via a security advisory. About CVE-2026-20045 CVE-2026-20045 is a code injection vulnerab...
On January 12th, 2026, we received a submission for a Backdoor vulnerability in the LA-Studio Element Kit for Elementor, a WordPress plugin with more than 20,000+ active installations. This vulnerability makes it possible for an unauthenticated attacker to create malicious administrator users.
The p...
Phishing campaign tries to reel in master passwords Password managers make great targets for attackers because they can hold many of the keys to your kingdom. Now, LastPass has warned customers about phishing emails claiming that action is required ahead of scheduled maintenance and told them not to...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...