> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
Group led by EFF and Imperial Valley Equity & Justice Asks Gov. Newsom and Caltrans Director to Act Immediately SAN FRANCISCO – California must revoke permits allowing federal agencies such as Customs and Border Patrol (CBP) and the Drug Enforcement Administration (DEA) to put automated license...
Interviewer: Jillian York
Yazan Badran is an assistant professor in international media and communication studies at the Vrije Universiteit Brussel, and a researcher at the Echo research group. His research focuses on the intersection between media, journalism and politics particularly in the MENA r...
The company has fixed several critical vulnerabilities that can be exploited for arbitrary code execution.
The post Patch Tuesday: Adobe Fixes 44 Vulnerabilities in Creative Apps appeared first on SecurityWeek.
Interviewer: Jillian York
Yazan Badran is an assistant professor in international media and communication studies at the Vrije Universiteit Brussel, and a researcher at the Echo research group. His research focuses on the intersection between media, journalism and politics particularly in the MENA r...
On January 12th, 2026, we received a submission for an Arbitrary File Upload vulnerability in WPvivid Backup, a WordPress plugin with more than 800,000 active installations. This vulnerability can be used by unauthenticated attackers to upload arbitrary files to a vulnerable site and achieve remote...
Several security issues were fixed in GLib.
La Commission de Protection des Informations Personnelles (PIPC) sud-coréenne a annoncé l'adoption d'un décret d'application modifiant la loi sur la protection des données personnelles, qui étend le droit à la portabilité des données à tous les secteurs d'activité.Ce décret, approuvé le 10 février p...
La Commission européenne a adopté deux décisions d'adéquation, l'une concernant le Brésil, permettant ainsi les transferts de données personnelles sans encadrement spécifique.Le 27 janvier 2026, la Commission européenne et le Brésil ont adopté des décisions d'adéquation mutuelles, jugeant leurs nive...
This investment comes less than 10 months after Reco’s last raise, bringing total funding to $85 million.
The post Reco Raises $30 Million to Enhance AI SaaS Security appeared first on SecurityWeek.
L'Autorité de protection des données personnelles polonaise (UODO) a participé à l'élaboration de lignes directrices par l'Agence des droits fondamentaux de l'Union européenne (FRA) pour garantir le respect des droits fondamentaux dans le cadre du Système d'entrée/sortie (EES).Ces lignes directrices...
L'autorité islandaise de protection des données (Personuvernd) communique sur la tenue de la Journée internationale pour un internet plus sûr le 10 février 2026.Cette journée, placée sous le thème annuel "Ensemble pour un meilleur internet", se concentre en 2026 sur "Technologie intelligente, décisi...
USN-7942-1 fixed vulnerabilities in GLib. This update provides the
corresponding updates for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, and Ubuntu 20.04 LTS. CVE-2025-3360 only affected Ubuntu 18.04
LTS and Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that GLib incorr...
L'autorité italienne de protection des données, le Garant pour la protection des données personnelles (GPDP), et l'Inspection nationale du travail (INL) ont initié une action de surveillance conjointe visant les centres logistiques d'Amazon en Italie.Cette initiative fait suite à des investigations...
L'Autorité de protection des données personnelles polonaise (UODO) a abordé les menaces liées aux hypertrucages et à l'intelligence artificielle lors de sa douzième Journée Portes Ouvertes.Lors de cet événement tenu le 6 février 2026, le président de l'UODO a exposé les dangers des contenus générés...
Led by existing investor Accel, with participation from Cyberstarts, Redpoint, and CRV, the Series B round brings the total amount raised by the company to $185 million.
The post Vega Raises $120M in Series B Funding to Grow Security Analytics Platform appeared first on SecurityWeek.
La Cour de justice de l'Union européenne a jugé qu'une décision contraignante du Comité européen de la protection des données (CEPD) constitue un acte susceptible de recours en annulation devant les juridictions de l'Union.L'affaire trouve son origine dans la décision contraignante 1/2021 du CEPD, l...
Volvo Group North America disclosed that it suffered an indirect data breach stemming from the compromise of IT systems at American business services giant Conduent, of which Volvo is a customer. [...]
Microsoft has begun rolling out updated Secure Boot certificates through monthly Windows updates to replace the original 2011 certificates that will expire in late June 2026. [...]
The Singaporean government said the China-backed hackers gained "limited access to critical systems" run by the country's top four telecommunication giants, but said they did not disrupt services or steal customers' data.
“The president, several of his top advisers, and lawmakers will be participating in a discussion at the White House today about FISA Section 702 renewal,” a senior White House official said.