> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
Hacked Snapchat accounts and secret filming with smart glasses, this week served two reminders of how womenâs privacy is still being violated.
Microsoft wants to introduce smartphone-style app permission prompts in Windows 11 to request user consent before apps can access sensitive resources such as files, cameras, and microphones. [...]
This article examines the widespread collection of personal data and the legal challenges individuals face from third-party subpoenas. It discusses key court rulings on government access to personal information and highlights the complexities of data privacy in the digital age.
The post How the Sup...
Winter Olympics hit by suspected âRussian originâ cyberattack â as one of Europeâs largest universities also reports major cybersecurity incident Italy said it blocked a wave of cyberattacks described as âof Russian originâ targeting systems tied to the Milano Cortina 2026 Winter Olympics, including...
A new commercial mobile spyware platform dubbed ZeroDayRAT is being advertised to cybercriminals on Telegram as a tool that provides full remote control over compromised Android and iOS devices. [...]
Available via Telegram, researchers warn ZeroDayRAT is a âcomplete mobile compromise toolkitâ comparable to kits normally requiring nation-state resources to develop.
The post New âZeroDayRATâ Spyware Kit Enables Total Compromise of iOS, Android Devices appeared first on SecurityWeek.
Estimated to have infected 7,000 systems, the botnet uses a mass-compromise pipeline, deploying various scanners and malware.
The post New âSSHStalkerâ Linux Botnet Uses Old Techniques appeared first on SecurityWeek.
Sur demande de l'ANSSI, un audit de sécurité approfondi du code source et de l'architecture de HAProxy a été réalisé : la solution est sécurisée et robuste.
Le post Ă la demande de lâANSSI, la solution open source HAProxy a Ă©tĂ© auditĂ©e : verdict, le code est blindĂ© ! a Ă©tĂ© publiĂ© sur IT-Connect.
Operation Cyber Guardian was Singaporeâs largest and longest running anti-cyber threat law enforcement operation
In 2023, the science fiction literary magazine Clarkesworld stopped accepting new submissions because so many were generated by artificial intelligence. Near as the editors could tell, many submitters pasted the magazineâs detailed story guidelines into an AI and sent in the results. And they werenâ...
Internetâexposed and vulnerable SolarWinds Web Help Desk (WHD) instances are under attack by threat actors looking to gain an initial foothold into target organizationsâ networks, Microsoft and Huntress researchers have warned. Once inside, the attackers are deploying legitimate remote access and di...
Forcepoint X-Labs researchers have identified a large Phorpiex botnet-aided phishing campaign that uses weaponized Windows shortcut files to deploy Global Group ransomware across victim systems.
The campaign, observed in late 2024 and continuing into 2026, leverages a commo...
NCSC call firms to âact nowâ following disruptive malware attacks targeting Polish energy providers
Senegal closed its national ID card office after a ransomware cyberattack disrupted ID, passport, and biometric services. Senegal confirmed a cyberattack on the Directorate of File Automation, the government office that manages national ID cards, passports, and biometric data. After ransomware claim...
January 5, 2026, Seattle, USA â ZAST.AI announced the completion of a $6 million Pre-A funding round. This investment came from the well-known investment firm Hillhouse Capital, bringing ZAST.AI's total funding close to $10 million. This marks a recognition from leading capital markets of a new solu...
A single benign-sounding prompt can systematically strip safety guardrails from major language and image models, raising fresh questions about the durability of AI alignment when models are customized for enterprise use, according to Microsoft research.
The technique, dubbe...
Affecting both RS and PRA, the bug can be exploited remotely via crafted requests without authentication.
The post BeyondTrust Patches Critical RCE Vulnerability appeared first on SecurityWeek.
HR outsourcer Conduent confirms intruders accessed benefits-related records tied to US personnel Nearly 17,000 Volvo employees had their personal data exposed after cybercriminals breached Conduent, an outsourcing giant that handles workforce benefits and back-office services.âŠ
SYTECH partnered with Futures For All to deliver a two-day âCrack the Caseâ digital forensics workshop, engaging 141 students worldwide and inspiring the next generation of cyber professionals.
SmarterTools confirmed last week that the Warlock (aka Storm-2603) ransomware gang breached its network by exploiting an unpatched SmarterMail instance.
The incident took place on January 29, 2026, when a mail server that was not updated to the latest version was compromised, the company's Chief Com...