> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape is marked by several critical threats and trends. Recently patched vulnerabilities in Barracuda devices are being actively exploited, allowing attackers root access. Cisco's BroadWorks and Openwave flaws are also under attack despite available patches. Apple has addressed Bluetooth and AirPlay vulnerabilities, reinforcing the need for prompt patching as 45% of EU IT service providers delay critical updates. New malware threatens Exchange servers, and leaked exploit kits are compromising iPhones via ads. Additionally, Microsoft released a substantial patch update addressing 1,094 vulnerabilities, including a critical zero-day in Outlook that risks credential theft. Cybersecurity resilience remains a priority as organizations grapple with the rising tide of AI-discovered vulnerabilities.
|
// AI-powered summary generated at 08:00
How Can Organizations Leverage Non-Human Identities for Better Security? Have you ever wondered how Non-Human Identities (NHIs) are reshaping cybersecurity? With cyber threats evolve, organizations must prioritize the management of NHIs, especially when operating in cloud environments. NHIs serve as...
Is Your Organization Ready for Agentic AI in Cybersecurity? Where cyber threats are becoming increasingly sophisticated, the use of Agentic AI in cybersecurity is transforming how industries like financial services handle their security protocols. But what exactly does this mean for your organizatio...
This week, the US National Institute of Standards and Technology (NIST) announced a new listening exercise, the AI Agent Standards Initiative, which it hopes will provide a roadmap for addressing agentic AI hurdles and, it said, ensure that the technology “is widely adopted wi...
How Secure Are Your Machine Identities? Non-Human Identities (NHIs) play a pivotal role in cybersecurity. Where businesses continue transitioning to cloud environments, the importance of protecting these machine identities becomes paramount. But how secure are your NHIs, and what measures are you im...
Are Non-Human Identities the Key to Unlocking Agentic AI in Data Protection? Organizations across industries are increasingly focusing on the management of Non-Human Identities (NHIs). These machine identities, akin to digital passports, play a pivotal role in cybersecurity by managing encrypted pas...
Google said it prevented 1.75 million bad apps from going live on Google Play during 2025, a figure that's down from previous years.
In a flash alert on Thursday, the FBI said it has tracked more than 1,900 ATM jackpotting incidents since 2020 and over 700 in 2025 that involved more than $20 million in losses.
Several security issues were fixed in the Linux kernel.
Dan Smith discovered that nova, a cloud computing fabric controller, calls qemu-img without format restrictions for resize, which may result in unsafe image resize operations that could destroy data on the host system. Only compute nodes using the Flat image backend are affected. For the oldstable d...
Dragos's Rob Lee said Volt Typhoon is "still very active, and they're still absolutely mapping out and getting into embedding in U.S. infrastructure, as well as across our allies.”
Governments and businesses have a shared interest in seeing post-quantum encryption broadly adopted throughout society.Â
The post State Dept. official says post-quantum transition plans will outlive current leadership appeared first on CyberScoop.
Ron Ben Yizhak discovered that the inetutils implementation of telnetd didn't sanitise the CREDENTIALS_DIRECTORY environment variable before passing it to the login binary. This could be exploited to bypass authentication and login as root. For the stable distribution (trixie), this problem has been...
A buffer overflow was discovered in libvpx, a library implementing the VP8/VP9 open video codecs, which could result in denial of service or potentially the execution of arbitrary code. For the oldstable distribution (bookworm), these problems have been fixed in version 1.12.0-1+deb12u5.
West Virginia sued Apple for allegedly allowing iCloud to be used to disseminate and store child sexual abuse content.
Session 12D: ML Backdoors
Authors, Creators & Presenters: Hanlei Zhang (Zhejiang University), Yijie Bai (Zhejiang University), Yanjiao Chen (Zhejiang University), Zhongming Ma (Zhejiang University), Wenyuan Xu (Zhejiang University)
PAPER
BARBIE: Robust Backdoor Detection Based On Latent Separab...
A heap-based buffer overflow was discovered in the RGBE/HDR parser of GEGL, a graph-based image processing library, which could result in denial of service or the execution of arbitrary code if malformed files are processed. For the oldstable distribution (bookworm), this problem has been fixed
[This is a Guest Diary contributed by John Moutos]
In this week’s newsletter Martin considers how defenders can turn offensive AI tools against themselves.
La Commission nationale de l'informatique et des libertés (CNIL) a rendu public l'ordre du jour de sa séance plénière du 19 février 2026.
Partie I (avec débats): :
* Examen d’un projet de délibération portant avis sur l’article 6 du projet de loi relatif à la protection de l’enfance ;
* Com...
Le Contrôleur européen de la protection des données (EDPS) a adopté deux documents clés visant à renforcer le rôle et l'indépendance des délégués à la protection des données (DPD) au sein des institutions, organes et organismes de l'Union européenne (IOUE).Le 18 décembre 2025, l'EDPS a publié des li...