> TODAY'S SUMMARY (117 articles)
Today's cyber news highlights several significant threats and trends:
1. eMudhra's certificate authority private keys were compromised, leading to urgent updates from major browsers to mitigate potential security risks.
2. Development platform Zeabur faced a second breach in two months due to leaked plaintext credentials, resulting in substantial data theft.
3. A data breach at Nikkei exposed over 1.8 million records, prompting concerns about the security of cloud services.
4. Ransomware groups are exploiting vulnerabilities in Palo Alto Networks products and Siemens Software Center, with active attacks reported.
5. ConnectWise's cloud backup service was disrupted due to a supply-chain attack, impacting numerous customers.
6. An increase in malicious calendar invite attacks has been reported, with a staggering 1,216% rise noted by security providers.
Overall, these incidents underscore the need for robust credential management and timely software updates to address emerging vulnerabilities.
|
// AI-powered summary generated at 20:00
The Department of Education in Victoria, Australia, notified parents that attackers gained access to a database containing the personal information of current and former students. [...]
Several security issues were fixed in AngularJS.
The financial sector should finalize its post-quantum cryptography transition circa 2034, G7 cyber experts said
The Digital Operational Resilience Act (DORA) introduces a unified framework for managing ICT risk across the European financial sector, with key requirements, including penetration testing, coming into force in 2026. Its aim is to ensure that regulated organisations, and the critical third-party pr...
Attackers use legitimate open-source software as cover, relying on user trust to compromise systems. We dive into an example.
Research analyzing 4,700 leading websites reveals that 64% of third-party applications now access sensitive data without business justification, up from 51% in 2024.Â
Government sector malicious activity spiked from 2% to 12.9%, while 1 in 7 Education sites show active compromise.
Specific offenders...
Terryn’s path to cybersecurity started with a fascination for criminal forensics and a knack for jailbreaking his family's tech — interests that eventually steered him toward the fast-paced world of digital investigations.
Offenbar haben Cyberkriminelle einen Sirenenalarm in der Stadt Halle ausgelöst.rame435 – shutterstock.com
In der Stadt Halle (Saale) ist es am Samstag (10. Januar) zu einem Fehlalarm gekommen. Gegen 22 Uhr heulten alle betriebsfähigen Sirenen auf, begleitet von einer englisc...
Introduction Broadcom’s acquisition of VMware and the subsequent shift to subscription-based licensing and bundled offerings have forced many organizations to re-evaluate their long-term reliance on the VMware ecosystem. While some large enterprises have managed to negotiate acceptable commercial te...
A threat actor breached Betterment’s systems, accessed customer information, and sent scam crypto-related messages.
The post Robo-Advisor Betterment Discloses Data Breach appeared first on SecurityWeek.
Microsoft has patched three zero-day vulnerabilities in the first patch Tuesday of 2026, including one under active exploitation
Endesa says payment info stolen after alleged crook boasted of 1 TB-plus haul Spanish energy giant Endesa is warning customers about a data breach after a cybercrim claimed to have walked off with a vast cache of personal information allegedly tied to more than 20 million people.…
The White House’s March 2025 Executive Order (EO) on “Achieving Efficiency Through State and Local Preparedness” raised an issue of utmost importance for national security and our critical infrastructure.
As noted in the order, “federal policy must rightly recognize that pr...
Artificial intelligence is now part of modern software development. The tools available to engineers today are enabling new levels of productivity, automation, and collaboration. Leaders...Read More
The post How AI Is Reshaping Software Development and How Tech Leaders Should Measure Its Impact appe...
Chainalysis estimates $17bn will be lost to crypto scams in 2025 as AI takes hold
Should verified identities become the standard online? Australia’s social media ban for under-16s shows why the question matters.
It was discovered that Rack incorrectly handled certain query parameters.
An attacker could possibly use this issue to cause a limited denial of
service. This issue was only addressed in Ubuntu 20.04 LTS and
Ubuntu 22.04 LTS. (CVE-2025-59830)
It was discovered that Rack did not properly handle cert...
Exploitable without authentication, the two security defects could lead to configuration leak and code execution.
The post Fortinet Patches Critical Vulnerabilities in FortiFone, FortiSIEM appeared first on SecurityWeek.
Microsoft confirmed that a recent Windows 365 update is blocking customers from accessing their Microsoft 365 Cloud PC sessions. [...]
The two browser updates resolve 26 security defects, including bugs that could be exploited for code execution.
The post Chrome 144, Firefox 147 Patch High-Severity Vulnerabilities appeared first on SecurityWeek.