> TODAY'S SUMMARY (22 articles)
Today's cyber news highlights significant threats and trends in the cybersecurity landscape. UK public services are prioritizing cyber resilience at the boardroom level following recent breaches. A DLL sideloading vulnerability in Siemens Software Center has been exploited by ClickFix attackers to deliver a remote access Trojan. Microsoft is addressing the risks posed by AI agents, urging organizations to treat them as insider threats. Meanwhile, a compromised version of the Rank Math PRO WordPress plugin has been circulating, embedding malware that can compromise sites. Additionally, OVHcloud's official CLI binaries on GitHub were found infected with infostealer malware. Lastly, frontline workers are increasingly bypassing multifactor authentication, raising concerns about security practices in critical sectors.
|
// AI-powered summary generated at 08:00
Palo Alto’s crosswalk signals were hacked last year. Turns out the city never changed the default passwords.
A max-severity remote code execution (RCE) flaw in HPE’s OneView management platform has been flagged by the Cybersecurity & Infrastructure Security Agency (CISA) for active exploitation. The flaw, tracked as CVE-2025-37164, has been added to CISA’s Known Exploited Vulnera...
Iran shut down the internet as protests spread nationwide. Dozens were killed in a violent crackdown amid soaring inflation and a collapsing currency. Iran has shut down the internet nationwide as protests spread across multiple cities. Security forces responded with a violent crackdown that reporte...
Fresh attacks targeted three VMware ESXi vulnerabilities that were disclosed in March 2025 as zero-days.
The post Exploit for VMware Zero-Day Flaws Likely Built a Year Before Public Disclosure appeared first on SecurityWeek.
Discover what’s new on Forensic Focus – have your say in the International Well-Being Study, find out about the recent F3 Analyst’s Annual Workshop, hear how Oxygen Forensics is enabling smarter, faster remote DFIR collections, and more.
As organizations plan for 2026, cybersecurity predictions are everywhere. Yet many strategies are still shaped by headlines and speculation rather than evidence. The real challenge isn’t a lack of forecasts—it’s identifying which predictions reflect real, emerging risks and which can safely be ignor...
Check Point has uncovered a vast, AI-powered scam operation dubbed the “Truman Show”
Jan 09, 2026 - Viktor Markopoulos - We often trust what we see. In cybersecurity, we are trained to look for suspicious links, strange file extensions, or garbled code. But what if the threat looked exactly like a smiling face sent by a colleague?Based on research by Paul Butler and building on Fire...
Japanese cybersecurity software firm Trend Micro has patched a critical security flaw in Apex Central (on-premise) that could allow attackers to execute arbitrary code with SYSTEM privileges. [...]
Image generation paywalled on X after ministers and regulators start asking awkward questions Grok has yanked its image-generation toy out of the hands of most X users after the UK government openly weighed a ban over the AI feature that "undressed" people on command.…
Trend Micro has released security updates to address multiple security vulnerabilities impacting on-premise versions of Apex Central for Windows, including a critical bug that could result in arbitrary code execution.
The vulnerability, tracked as CVE-2025-69258, carries a CVSS score of 9.8 out of a...
The FBI says North Korea’s Kimsuky APT group is using QR codes in spear phishing campaigns
China-linked UAT-7290 has targeted South Asia and Southeastern Europe since 2022, conducting espionage and deploying RushDrop, DriveSwitch, and SilentRaid. China-linked threat actor UAT-7290 has conducted espionage attacks since at least 2022, targeting South Asia and Southeastern Europe. UAT-7290 p...
The majority of certificate outages don’t begin with a breach alert. They are silent at first. One day, a browser warning appears when your website loads, causing users to hesitate and your traffic to decline. This is due to the fact that most certificate failures are not caused by hackers. They occ...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday said it's retiring 10 emergency directives (Eds) that were issued between 2019 and 2024.
The list of the directives now considered closed is as follows -
ED 19-01: Mitigate DNS Infrastructure Tampering
ED 20-02: Mitigate W...
The founder of a spyware company that encouraged customers to secretly monitor their romantic partners has pleaded guilty to federal charges - marking one of the few successful US prosecutions of a stalkerware operator.
Read more in my article on the Hot for Security blog.
Every three to four years, OWASP releases a new version of arguably its most famous project, the “OWASP Top Ten”. Originally started in 2003, this list serves as an awareness document to highlight the 10 most prevalent issues for web applications. The newest release marks the eighth iteration and ha...
Welcome to a new year of my Patch Tuesday forecast blog where I provide a summary of Microsoft and other vendor’s security patch activity (and reported issues) for the month, talk about some of the latest trends, processes, and evolution of patch management, and finally yes, provide a forecast of wh...
Viele KRITIS-Einrichtungen wie Energieversorger verzichten auf verschlüsselte Funknetze.Mangkorn Danggura – shutterstock.com
Etliche Einrichtungen der kritischen Infrastruktur in Deutschland kommunizieren mit ungeschĂĽtzter Funktechnik. Der Digitalfunk zahlreicher Haftanstalt...
Reverse engineers must have a good understanding of the environment where malware are executed (read: the operating system). In a previous diary, I talked about malicious code that could be executed when loading a DLL[1]. Today, I'll show you how a malware can hide suspicious information related to...