[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> Explore the latest Microsoft Incident Response proactive services for enhanced resilience
The new proactive services from Microsoft Incident Response turn security uncertainty into readiness with expert‑led preparation and advanced intelligence. The post Explore the latest Microsoft Incident Response proactive services for enhanced resilience appeared first on Microsoft Security Blog.
> Taiwan blames Chinese ‘cyber army’ for rise in millions of daily intrusion attempts
The country’s National Security Bureau said attacks rose 6% in 2025, with the energy and hospital sectors seeing the biggest rise. The post Taiwan blames Chinese ‘cyber army’ for rise in millions of daily intrusion attempts appeared first on CyberScoop.
> Versatile Malware Loader pkr_mtsi Delivers Diverse Payloads
Malicious Windows packer named pkr_mtsi used as a flexible malware loader in malvertising campaigns
> Ransomware Hits a Claims Giant: What the Sedgwick Breach Reveals About Modern Extortion Attacks
A recent breach disclosure reveals that claims management firm Sedgwick was targeted by the TridentLocker ransomware group, with attackers claiming to have exfiltrated sensitive data from systems supporting its government services operations before deploying ransomware, according to Cybersecurity Ne...
> A Single Browser Flaw, Millions at Risk: What the Chrome WebView Vulnerability Teaches Us About Exposure Windows
A recent security update reveals that Google patched a high-severity Chrome WebView vulnerability that could allow attackers to bypass application security restrictions and execute malicious content within Android and enterprise applications, according to Cybersecurity News. Because Chrome WebView i...
> Microsoft: Classic Outlook bug prevents opening encrypted emails
Microsoft has confirmed a known issue that prevents recipients from opening encrypted emails in classic Outlook. [...]
> Alleged cyber scam kingpin arrested, extradited to China
Chen Zhi’s arrest is the latest chapter in the remarkable downfall of one of the country’s most prominent businesses, with holdings in the real estate, banking, entertainment and airline industries.
> Ghost Tap Malware Fuels Surge in Remote NFC Payment Fraud
New Android malware enables unauthorized tap-to-pay transactions without physical access to bank cards
> NDSS 2025 – Automatic Insecurity: Exploring Email Auto-configuration In The Wild
Session 8A: Email Security Authors, Creators & Presenters: Shushang Wen (School of Cyber Science and Technology, University of Science and Technology of China), Yiming Zhang (Tsinghua University), Yuxiang Shen (School of Cyber Science and Technology, University of Science and Technology of Chin...
> Malicious NPM Packages Deliver NodeCordRAT
IntroductionZscaler ThreatLabz regularly monitors the npm database for suspicious packages. In November 2025, ThreatLabz identified three malicious packages: bitcoin-main-lib, bitcoin-lib-js, and bip40. The bitcoin-main-lib and bitcoin-lib-js packages execute a postinstall.cjs script during installa...
> The Loudest Voices in Security Often Have the Least to Lose
Security advice fails when it comes from those who don’t bear the consequences and won’t be responsible for making it work. The post The Loudest Voices in Security Often Have the Least to Lose appeared first on SecurityWeek.
> Veeam issues patch to close critical remote code execution flaw
The vulnerability could let operator-level users run commands as database administrator. The post Veeam issues patch to close critical remote code execution flaw appeared first on CyberScoop.
> Microsoft scraps Exchange Online spam clamp after customers cry foul
Negative feedback sinks Redmond's plan to cap outbound email recipients Microsoft has backed away from planned changes to Exchange Online after customers objected to limits designed to curb outbound email abuse.…
> Human-in-the-Loop vs Autonomous Development for Enterprise Software
Enterprise software teams are standing at a crossroads. On one side is human-in-the-loop development, where AI accelerates delivery but humans stay firmly in control. On...Read More The post Human-in-the-Loop vs Autonomous Development for Enterprise Software appeared first on ISHIR | Custom AI Softw...
> Bug in Open WebUI macht Kostenlos-Tool zur Backdoor
Der Schweregrad des Bugs in Open WebUI wird als hoch eingestuft. Wirestock Creators- shutterstock.com Sicherheitsforschende von Cato Networks haben eine Schwachstelle in Open WebUI, einem selbstgehosteten Enterprise Interface für Large Language Models (LLM), entdeckt. Diese...
> Slackware 15.0: Important curl Security Fix for Token Leak DoS Issue
New curl packages are available for Slackware 15.0 and -current to fix security issues.
> Neue Ransomware-Bedrohung zielt auf deutsche Unternehmen
Der Ransomware-Dienst Ransomhouse nutzt jetzt eine komplexe Dual-Schlüssel-Verschlüsselung und automatisierte Angriffe auf VMware ESXi.Suttipun – shutterstock.com Sicherheitsexperten haben kürzlich festgestellt, dass die Ransomware-Gruppe Jolly Scorpius ihren RaaS-(Ransomwar...
> Ubuntu 22.04 LTS: libcaca Important Crash Issue USN-7943-1 CVE-2022-0856
libcaca could be made to crash if it opened a specially crafted file.
> Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats
Impersonating a legitimate extension from AITOPIA, the two malicious extensions were also exfiltrating users’ browser activity. The post Chrome Extensions With 900,000 Downloads Caught Stealing AI Chats appeared first on SecurityWeek.
> CES 2026 : BLUETTI dévoile le Charger 2, capable de combiner l’énergie solaire et de l’alternateur
À l'occasion du CES 2026, BLUETTI a dévoilé le Charger 2, un appareil qui marque un tournant pour la recharge mobile. Il est présenté par la marque comme le premier hub intelligent capable de se recharger à l'aide de l'énergie de la voiture et du solaire, sans choisir entre l'un ou l'autre. Voici ce...