> TODAY'S SUMMARY (65 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The UK NCSC warns organizations to update systems using PHP due to critical vulnerabilities (CVE-2026-109618 and CVE-2026-109619) that were leaked prior to an emergency patch release. Ransomware attacks are escalating, with groups like The Gentlemen and Qilin intensifying their tactics in a competitive landscape. Additionally, the CISA reports that the SafePay ransomware gang has breached over 600 critical infrastructure entities globally. Concerns around AI are growing, as its capabilities may empower less skilled attackers to conduct sophisticated exploits. Lastly, a significant flaw in Signal's calling library has emerged, which may allow ongoing eavesdropping after calls end, prompting users to update their apps.
|
// AI-powered summary generated at 12:01
Today’s data centers are hardened facilities with layered access controls, surveillance, redundancy and security teams focused on keeping threats out. Yet, even the most secure environment can be compromised by a single moment of trust, such as a legitimate-looking email that prompts someone to cli...
The legislation also includes mandates on election security funding and CISA staff levels, as well as an extension of a state and local cyber grant program.
The post Congressional appropriators move to extend information-sharing law, fund CISA appeared first on CyberScoop.
A new Internet-of-Things botnet called Kimwolf has spread to more than 2 million devices, forcing infected systems to participate in massive distributed denial-of-service (DDoS) attacks and to relay other malicious and abusive Internet traffic. Kimwolf's ability to scan the local networks of comprom...
Earlier this month, Iran’s internet connectivity faced one of its most severe disruptions in recent years with a near-total shutdown from the global internet and major restrictions on mobile access.
EFF joined architects, operators, and stewards of the global internet infrastructure in calling upon...
Earlier this month, Iran’s internet connectivity faced one of its most severe disruptions in recent years with a near-total shutdown from the global internet and major restrictions on mobile access.
EFF joined architects, operators, and stewards of the global internet infrastructure in calling upon...
Using only natural language instructions, researchers were able to bypass Google Gemini's defenses against malicious prompt injection and create misleading events to leak private Calendar data. [...]
The numbers tell a stark story: $1.42 billion lost across 149 documented incidents in 2024 due to smart contract vulnerabilities, with access control flaws accounting for $953.2 million in damages alone. While the Web3 community debates the perfect AI solution for smart contract security, billions...
There is a rise in cybersecurity threats in today’s rapidly changing digital landscape. Organizations have struggled to safeguard sensitive data and systems from ransomware and breaches. In fact, about 87% of security professionals report that AI-based cyberattacks are plaguing organizations worldw...
L'autorité norvégienne de protection des données (Datatilsynet) a publié une décision de sanction à l'encontre de Timegrip AS, comprenant le prononcé d'une amende de 250 000 couronnes norvégiennes (environ 21 800 €), pour des manquements en lien avec le droit d'accès des personnes concernées. Cette...
Why Stitched Together Platforms Quietly Increase Breach Probability In today’s cybersecurity market, nearly every vendor claims to offer an integrated or unified platform. For buyers under pressure to reduce complexity, these promises are appealing. But beneath the marketing language lies a reality...
L'organisation Ce ne sont pas vos affaires (noyb) a publié une analyse critique de la proposition législative "Paquet numérique omnibus" de la Commission européenne, mettant en lumière ses impacts sur le RGPD et la directive sur la vie privée et les communications électroniques.Suite à la propositio...
Le Bureau du Commissaire à l'information (ICO) a sanctionné deux sociétés pour l'envoi de millions de messages de marketing direct non sollicités.La société Allay Claims Ltd a été condamnée à une amende de 120 000 £ (environ 141 600 €) pour l'envoi de plus de 4 millions de messages texte publicitair...
We've identified an aspect of Azure’s Private Endpoint architecture that could expose Azure resources to denial of service (DoS) attacks.
The post DNS OverDoS: Are Private Endpoints Too Private? appeared first on Unit 42.
Une enquête de l'association "none of your business" (noyb) révèle les pratiques de collecte de données de l'organisme de crédit autrichien CRIF, qui s'appuie sur des courtiers en adresses exploitant des registres publics.L'enquête, menée auprès de plus de 2 400 personnes, a montré que CRIF obtient...
The privacy rights group Fight for the Future was one of 44 organizations that sent a letter to lawmakers urging them to pull back on funding for ICE, noting the growing threats to U.S. citizens and others as the agency spends millions of dollars on its growing surveillance capabilities.
The post F...
L'Autorité hellénique de protection des données a publié une décision de sanction à l'encontre de la société ZÉNITH - Société de fourniture de gaz de Thessalonique Thessalie S.A. et de trois de ses sous-traitants (comprenant le prononcé d'une amende globale de 105 000 €) pour des manquements liés à ...
L'autorité de protection des données de Lettonie, l'Inspection d'État des données (DVI), a annoncé la tenue d'un séminaire en ligne consacré à la protection des données personnelles, au télémarketing et à la cyber-hygiène.Organisé le 28 janvier à 10h00 à l'occasion de la 20e Journée de la protection...
The rapid adoption of artificial intelligence has forced organizations to confront a hard truth: AI changes the cybersecurity equation.
New attack surfaces, new misuse patterns and new forms of automation require a different approach to managing risk.
That’s why NIST has stepped forward.
Through its...
Discover four key identity and access priorities for the new year to strengthen your organization's identity security baseline.
The post Four priorities for AI-powered identity and network access security in 2026 appeared first on Microsoft Security Blog.
British ministers will visit Australia to “learn first-hand from their approach,” the government’s Monday announcement said, alluding to the country’s controversial ban on social media use for children under age 16.