> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
A new commercial mobile spyware platform dubbed ZeroDayRAT is being advertised to cybercriminals on Telegram as a tool that provides full remote control over compromised Android and iOS devices. [...]
Available via Telegram, researchers warn ZeroDayRAT is a âcomplete mobile compromise toolkitâ comparable to kits normally requiring nation-state resources to develop.
The post New âZeroDayRATâ Spyware Kit Enables Total Compromise of iOS, Android Devices appeared first on SecurityWeek.
Estimated to have infected 7,000 systems, the botnet uses a mass-compromise pipeline, deploying various scanners and malware.
The post New âSSHStalkerâ Linux Botnet Uses Old Techniques appeared first on SecurityWeek.
Sur demande de l'ANSSI, un audit de sécurité approfondi du code source et de l'architecture de HAProxy a été réalisé : la solution est sécurisée et robuste.
Le post Ă la demande de lâANSSI, la solution open source HAProxy a Ă©tĂ© auditĂ©e : verdict, le code est blindĂ© ! a Ă©tĂ© publiĂ© sur IT-Connect.
Operation Cyber Guardian was Singaporeâs largest and longest running anti-cyber threat law enforcement operation
In 2023, the science fiction literary magazine Clarkesworld stopped accepting new submissions because so many were generated by artificial intelligence. Near as the editors could tell, many submitters pasted the magazineâs detailed story guidelines into an AI and sent in the results. And they werenâ...
Internetâexposed and vulnerable SolarWinds Web Help Desk (WHD) instances are under attack by threat actors looking to gain an initial foothold into target organizationsâ networks, Microsoft and Huntress researchers have warned. Once inside, the attackers are deploying legitimate remote access and di...
Forcepoint X-Labs researchers have identified a large Phorpiex botnet-aided phishing campaign that uses weaponized Windows shortcut files to deploy Global Group ransomware across victim systems.
The campaign, observed in late 2024 and continuing into 2026, leverages a commo...
NCSC call firms to âact nowâ following disruptive malware attacks targeting Polish energy providers
Senegal closed its national ID card office after a ransomware cyberattack disrupted ID, passport, and biometric services. Senegal confirmed a cyberattack on the Directorate of File Automation, the government office that manages national ID cards, passports, and biometric data. After ransomware claim...
January 5, 2026, Seattle, USA â ZAST.AI announced the completion of a $6 million Pre-A funding round. This investment came from the well-known investment firm Hillhouse Capital, bringing ZAST.AI's total funding close to $10 million. This marks a recognition from leading capital markets of a new solu...
A single benign-sounding prompt can systematically strip safety guardrails from major language and image models, raising fresh questions about the durability of AI alignment when models are customized for enterprise use, according to Microsoft research.
The technique, dubbe...
Affecting both RS and PRA, the bug can be exploited remotely via crafted requests without authentication.
The post BeyondTrust Patches Critical RCE Vulnerability appeared first on SecurityWeek.
HR outsourcer Conduent confirms intruders accessed benefits-related records tied to US personnel Nearly 17,000 Volvo employees had their personal data exposed after cybercriminals breached Conduent, an outsourcing giant that handles workforce benefits and back-office services.âŠ
SYTECH partnered with Futures For All to deliver a two-day âCrack the Caseâ digital forensics workshop, engaging 141 students worldwide and inspiring the next generation of cyber professionals.
SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance.
The incident took place on January 29, 2026, when a mail server that was not updated to the latest version was compromised, the company's Chief Com...
Dutch agencies confirmed attacks exploiting Ivanti EPMM flaws that exposed employee contact data at the data protection authority and courts. Dutch authorities said cyberattacks hit the Dutch Data Protection Authority and the Council for the Judiciary after hackers exploited newly disclosed flaws in...
China-linked UNC3886 targeted all four major telecom providers, but did not disrupt services or access customer information.
The post Singapore: Rootkits, Zero-Day Used in Chinese Attack on Major Telecom Firms appeared first on SecurityWeek.
Troops fitted with new comms kit as part of Project ASGARD British soldiers are to get an array of AI-ready kit that should mean they don't have to wait to see the "whites of their eyes" before pulling the trigger.âŠ
Itâs time to file your tax return. And cybercriminals are lurking to make an already stressful period even more edgy.