> TODAY'S SUMMARY (23 articles)
Today's cybersecurity news highlights several significant threats and trends:
1. A data leak at the State Bank of India exposed 3,897 customer records on the dark web, raising concerns about the source and integrity of the data.
2. The U.S. CISA has added vulnerabilities affecting Plex2Shell, Siemens, and SiteGuard to its Known Exploited Vulnerabilities catalog, urging federal agencies to apply patches promptly.
3. Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), which could allow unauthenticated remote code execution, have leaked, prompting an emergency patch release.
4. A Belarus-aligned hacktivist group has infiltrated a Russian healthcare organization for nearly two years, utilizing a backdoor hidden in VMware Tools.
5. Stolen keys from UpdraftCentral have been used to backdoor WordPress sites, emphasizing the risks associated with developer account compromises.
Overall, the day reflects ongoing vulnerabilities in software and infrastructure, alongside significant breaches affecting both financial institutions and web services.
|
// AI-powered summary generated at 08:00
Visualize web and API coverage, validate attack paths, and confirm every executed action with screenshots and logs in Escape
The post How to Visualize Web & API Coverage with Screenshots and Validate Attack Paths in Escape appeared first on Security Boulevard.
In December 2025, data allegedly breached from the Indian streaming music service "Raaga" was posted for sale to a popular hacking forum. The data contained 10M unique email addresses along with names, genders, ages (in some cases, full date of birth), postcodes and passwords stored as unsalted MD5...
How can organizations find and fix systems vulnerable to Y2K38 — the Unix epoch time overflow problem, also known as Epochalypse?
Cybersecurity researchers have disclosed details of a security flaw that leverages indirect prompt injection targeting Google Gemini as a way to bypass authorization guardrails and use Google Calendar as a data extraction mechanism.
The vulnerability, Miggo Security's Head of Research, Liad Eliyahu,...
The U.K. government is warning of continued malicious activity from Russian-aligned hacktivist groups targeting critical infrastructure and local government organizations in the country in disruptive denial-of-service (DDoS) attacks. [...]
Cet article présente les notions de liens physiques et de liens symboliques, y compris les différences et comment les utiliser sur Linux et Windows.
Le post Comprendre les liens physiques (Hard Links) et les liens symboliques (Soft Links) a été publié sur IT-Connect.
Feras Albashiti faces 10 years after $20,000 in sales to undercover agent exposed ransomware ties A Jordanian national faces sentencing in the US after pleading guilty to acting as an initial access broker (IAB) for various cyberattacks.…
Nicholas Moore, a 24-year-old Tennessee man, pleaded guilty to using stolen credentials of authorized users to hack into computer systems of the Supreme Court, VA, and AmeriCorps, obtaining sensitive information and then posting it online to his Instagram account.
The post Hacker Pleads Guilty to A...
New malware PDFSIDER enables covert, long-term access to compromised systems via advanced techniques
The following updated rpms for have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
A Tennessee man has pleaded guilty to hacking the U.S. Supreme Court's electronic filing system and breaching accounts at the AmeriCorps U.S. federal agency and the Department of Veterans Affairs. [...]
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Misaligned agents are just one layer of the AI security challenge that startup Witness AI is trying to solve. It detects employee use of unapproved tools, blocking attacks, and ensuring compliance.Â
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Session 9B: DNN Attack Surfaces
Authors, Creators & Presenters: Yanzuo Chen (The Hong Kong University of Science and Technology), Yuanyuan Yuan (The Hong Kong University of Science and Technology), Zhibo Liu (The Hong Kong University of Science and Technology), Sihang Hu (Huawei Technologies),...
UK NCSC warned of disruptive cyber attacks by Russian hacktivists targeting critical infrastructure
It was discovered that the Apache HTTP Server incorrectly handled failed
ACME certificate renewals. This could result in renewal attempts to be
repeated without delays, possibly leading to a denial of service.
(CVE-2025-55753)
Anthony Parfenov discovered that the Apache HTTP Server would pass the
q...