> TODAY'S SUMMARY (23 articles)
Today's cybersecurity news highlights several significant threats and trends:
1. A data leak at the State Bank of India exposed 3,897 customer records on the dark web, raising concerns about the source and integrity of the data.
2. The U.S. CISA has added vulnerabilities affecting Plex2Shell, Siemens, and SiteGuard to its Known Exploited Vulnerabilities catalog, urging federal agencies to apply patches promptly.
3. Two critical PHP vulnerabilities (CVE-2026-109618 and CVE-2026-109619), which could allow unauthenticated remote code execution, have leaked, prompting an emergency patch release.
4. A Belarus-aligned hacktivist group has infiltrated a Russian healthcare organization for nearly two years, utilizing a backdoor hidden in VMware Tools.
5. Stolen keys from UpdraftCentral have been used to backdoor WordPress sites, emphasizing the risks associated with developer account compromises.
Overall, the day reflects ongoing vulnerabilities in software and infrastructure, alongside significant breaches affecting both financial institutions and web services.
|
// AI-powered summary generated at 08:00
GootLoader malware uses malformed ZIP files made of hundreds of concatenated archives to evade detection. GootLoader is used by ransomware actors for initial access, then handed off to others. Built to evade detection, it accounted for 11% of bypassing malware in the past years. GootLoader runs on a...
Microsoft has released multiple emergency, out-of-band updates for Windows 10, Windows 11, and Windows Server to fix two issues caused by the January Patch Tuesday updates. [...]
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Gogs 0-Day Exploited in the Wild SHADOW#REACTOR â Text-Only Staging, .NET Reactor, and In-Memory Remcos RAT Deployment  âUntrustworthy Fundâ: targ...
In December 2025, data from France's Pass'Sport program was posted to a popular hacking forum. Initially misattributed to CAF (the French family allowance fund), the data contained 6.5M unique email addresses affecting 3.5M households. The data also included names, phone numbers, genders and physica...
Session 9B: DNN Attack Surfaces
Authors, Creators & Presenters: Yanzuo Chen (The Hong Kong University of Science and Technology), Zhibo Liu (The Hong Kong University of Science and Technology), Yuanyuan Yuan (The Hong Kong University of Science and Technology), Sihang Hu (Huawei Technologies),...
The Canadian Investment Regulatory Organization (CIRO) confirmed that the data breach it suffered last year impacts about 750,000 Canadian investors. [...]
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. UkraineâGermany operation targets Black Basta, Ru...
As Hollywood imagines our future, are brain and human microchip implants nearing a âChatGPT momentâ in 2026? Medical progress collides with privacy fears and state bans.
The post Will 2026 See a âChatGPT Momentâ for Microchip Implants? appeared first on Security Boulevard.
Hereâs an overview of some of last weekâs most interesting news, articles, interviews and videos: What security teams can learn from torrent metadata Security teams often spend time sorting through logs and alerts that point to activity happening outside corporate networks. Torrent traffic shows up...
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Donât get pwned; get real-time alerts & prevent breaches #SecureYourSiteI thought Scott would cop it first when he posted about what his solar system really cost him last year. "You're so gonna get that stupid AI-slop respon...
I&#;x26;#;39;ve seen many API requests for different LLMs in the honeypot logs.
What is ISO 9001? ISO 9001 is recognized globally as the standard for Quality Management Systems (QMS). Its full name is ISO 9001:2015, indicating the most recent revision published in 2015 by the International Organization for Standardization (ISO). This framework is relevant to any organization, r...
J'ai enregistré plus de 500 vidéos YouTube au format tutoriel : voici les périphériques et les logiciels que j'utilise pour produire ces vidéos en 2026.
Le post Mon Setup Vidéo 2026 : matériels et logiciels utilisés pour mes vidéos YouTube a été publié sur IT-Connect.
Google is testing "Skills" for Gemini in Chrome, which will allow AI in Chrome to perform tasks automatically, and it could challenge Perplexity Comet or Edge's Copilot mode. [...]
Google Chrome now lets you delete the local AI models that power the "Enhanced Protection" feature, which was upgraded with AI capabilities last year. [...]
YCC Parts a subi une attaque de hackers qui ont infiltré une partie de ses serveurs et crypté des données, entraßnant une interruption temporaire du systÚme. L'entreprise a activé ses mécanismes de défense et de récupération de la cybersécurité et a engagé des entreprises et des experts externes pou...
Le conseil d'Inverclyde a subi des incidents de cybersĂ©curitĂ©, notamment la compromission d'un compte utilisateur Ă©ducatif. Les Ă©coles et les Ă©tablissements pour la petite enfance ont Ă©tĂ© temporairement dĂ©connectĂ©s pour enquĂȘter sur l'incident. Les transports scolaires et les repas ne sont pas affec...
Some of you may of course think what, only 20,000 commits after almost thirty years in the project, what kind of slacker is that guy? But yes, today I merged my 20,000th commit into the curl repository â out of a total of 37,604 commits (53%). Not that anyone is counting. 20,000 â Today, January ⊠C...
In the curl project we have a long tradition of offering multiple optional backends for specific protocols. In this spirit we have added experimental support for a number of different HTTP/3 + QUIC backends over time. A while ago we dropped one of those experiments, the msh3 backend. Today we cleanu...
How Crucial Is AI Adaptability in Detecting Non-Human Identity Breaches? Have you ever questioned the true scale and importance of AI adaptability in cybersecurity, specifically in detecting non-human identity breaches? At the heart of modern digital security lies the comprehensive management of Non...