[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Betterment data breach might be worse than we thought
This breach now appears far more serious. The leaked data includes rich personal and financial details that phishers could use.
> What is an insider threat and how can you protect your business?
Insider threats can be accidental or deliberate, but they're always dangerous: Find out how to protect your business.
> USN-7992-2: Inetutils vulnerability
USN-7992-1 fixed vulnerabilities in telnetd in Inetutils. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS, and Ubuntu 20.04 LTS. Original advisory details: Kyu Neushwaistein discovered that telnetd in Inetutils incorrectly handled certain environment variable...
> Texas sues TP-Link, alleging it allows China to hack into routers
Attorney General Ken Paxton announced the lawsuit on Monday and said it is the first of several that will be filed this week against companies affiliated with China's government.
> Engineering for the Inevitable: Managing Downstream Failures in Security Data Pipelines
Learn how to prevent 50% of detection failures caused by log delivery chain issues. Master persistent queuing, schema drift mitigation, and automated recovery for zero data loss SOC operations. The post Engineering for the Inevitable: Managing Downstream Failures in Security Data Pipelines appeared...
> German train line back on track after DDoS yanks the brakes
National rail bookings and timetables disrupted for nearly 24 hours If you wanted to book a train trip in Germany recently, you would have been out of luck. The country's national rail company says that its services were disrupted for hours because of a cyberattack.…
> Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution
Cybersecurity researchers have disclosed a critical security flaw in the Grandstream GXP1600 series of VoIP phones that could allow an attacker to seize control of susceptible devices. The vulnerability, tracked as CVE-2026-2329, carries a CVSS score of 9.3 out of a maximum of 10.0. It has been desc...
> Accès illégaux à FICOBA, 1,2 million de comptes visés
Accès illégaux à FICOBA fin janvier 2026, 1,2 million de comptes copiés par un pirate....
> Telegram channels expose rapid weaponization of SmarterMail flaws
Underground Telegram channels shared SmarterMail exploit PoCs and stolen admin credentials within days of disclosure. Flare explains how monitoring these communities reveals rapid weaponization of CVE-2026-24423 and CVE-2026-23760 tied to ransomware activity. [...]
> Microsoft: Anti-phishing rules mistakenly blocked emails, Teams messages
Microsoft says an Exchange Online issue that mistakenly quarantined legitimate emails last week was triggered by faulty heuristic detection rules designed to block credential phishing campaigns. [...]
> Ubuntu 25.10 Apache Traffic Server Important DoS Risk CVE-2024-50305
trafficserver could be made to crash if it received specially crafted input.
> OneClaw: Discovery and Observability for the Agentic Era
Prompt Security from SentinelOne turns hidden agent activity into clear, actionable governance intelligence with the release of OneClaw.
> Choisir le service public frappé par une fuite massive
Fuite CSP : 377 418 candidats exposés, compte gestionnaire détourné et données personnelles volées....
> Cryptojacking Campaign Exploits Driver to Boost Monero Mining
Cryptojacking campaign used pirated software to deploy a persistent XMRig miner with stealth tactics
> NDSS 2025 – CLIBE: Detecting Dynamic Backdoors In Transformer-based NLP Models
Session 12D: ML Backdoors Authors, Creators & Presenters: Rui Zeng (Zhejiang University), Xi Chen (Zhejiang University), Yuwen Pu (Zhejiang University), Xuhong Zhang (Zhejiang University), Tianyu Du (Zhejiang University), Shouling Ji (Zhejiang University) PAPER CLIBE: Detecting Dynamic Backdoor...
> Fulton County lawsuit claims feds used ‘gross mischaracterizations’ to justify raid
A former federal election official says the FBI's affidavit justifying last month's Fulton County raid misrepresented basic election facts, despite the agency's claims having already been investigated and debunked by Georgia officials.  The post Fulton County lawsuit claims feds used ‘gross mischara...
> SRE Playbook: A Guide to Discover and Catalog Non-Human Identities (NHI)
Let's take a closer look at the fragmented NHI inventory from a site reliability engineer's perspective. The post SRE Playbook: A Guide to Discover and Catalog Non-Human Identities (NHI) appeared first on Security Boulevard.
> How synthetic data can help solve AI’s data crisis
As AI demand outpaces the availability of high-quality training data, synthetic data offers a path forward. We unpack how synthetic datasets help teams overcome data scarcity to build production-ready AI. The post How synthetic data can help solve AI’s data crisis appeared first on Security Boulevar...
> Debian Trixie Linux Critical Privilege Escalation DSA-6141-1
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.73-1.
> New Keenadu Android Malware Found on Thousands of Devices
The malware has been preinstalled on many devices but it has also been distributed through Google Play and other app stores. The post New Keenadu Android Malware Found on Thousands of Devices appeared first on SecurityWeek.