> TODAY'S SUMMARY (124 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. ConnectWise has suspended its Cloud Backup service following a supply chain attack that compromised Microsoft 365 accounts, exposing sensitive customer data.
2. Hackers exploited vulnerabilities in Plex servers to deploy cryptocurrency miners and proxy software, emphasizing the urgency for users to apply security updates.
3. A breach in the OpenCode AI platform may have exposed API keys for major AI providers, including OpenAI and Google, raising concerns over data security in AI applications.
4. Malware campaigns are increasingly targeting popular software like AOMEI and WordPress plugins, indicating a rise in supply chain attacks.
5. Ongoing spyware incidents in Serbia highlight the political use of surveillance technologies ahead of elections, while phishing attacks on Microsoft brands are on the rise.
6. Critical vulnerabilities in various systems, including Oracle and Drupal, have been reported, underlining the need for timely patching and security measures.
Organizations should remain vigilant, prioritize patching, and enhance their defenses against evolving threats.
|
// AI-powered summary generated at 20:01
Ilya Lichtenstein was supposed to serve five years after being sentenced in late 2024.
The post Convicted Bitfinex bitcoin launderer freed from prison, thanks Trump law appeared first on CyberScoop.
CEO Nikesh Arora's trip to Tel Aviv last month sparked rumors. Palo Alto Networks is on shopping spree. The company is reportedly considering a $400 million purchase of Israeli cybersecurity start up Koi, which raised $48 million in funding last year. âŠ
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD âHyperacute Interdynamicsâ appeared first on Security Boulevard.
The Russia-aligned threat actor known as UAC-0184 has been observed targeting Ukrainian military and government entities by leveraging the Viber messaging platform to deliver malicious ZIP archives.
"This organization has continued to conduct high-intensity intelligence gathering activities against...
Flights across Greece were impacted for several hours after noise was reported on multiple air traffic communication channels.
The post Cyberattack Unlikely in Communications Failure That Grounded Flights in Greece appeared first on SecurityWeek.
Bleeping Computer reports that hackers are exploiting an old vulnerability in FortiOS that can be used to get around the two-factor authentication (2FA) requirement.
The vulnerability, designated CVE-2020-12812, was patched back in July 2020, but five and a half years later...
The hacking group Crimson Collective has claimed the theft of personal information pertaining to over 1 million Brightspeed customers.
The post Brightspeed Investigating Cyberattack appeared first on SecurityWeek.
As cyber threats become more frequent and more complex, theyâre causing visible, measurable damage to organizationsâ reputations and bottom lines. But the damage doesnât end there. Breaches â or at least the threat of them â are impacting the mental health of companiesâ IT and...
L'Agence Espagnole de Protection des DonnĂ©es (AEPD) a aujourd'hui publiĂ© une dĂ©cision de sanction Ă l'encontre de 4USPORT INSTALLATIONS SPORTIVES, S.L. (comprenant le prononcĂ© d'une amende de 600 âŹ) pour des manquements en lien avec son obligation de coopĂ©ration.Cette affaire dĂ©bute par une plainte...
L'Agence Espagnole de Protection des Données a publié une décision de sanction à l'encontre de la Municipalité de San Cristóbal de La Laguna pour ne pas avoir respecté une précédente injonction de l'autorité.Cette affaire fait suite à une précédente décision du 21 juin 2024, par laquelle il avait ét...
Recently, a new "breed" of IP-based KVM devices has been released. In the past, IP-based KVM devices required dedicated "server-grade" hardware using IPMI. They often cost several $100 per server, and are only available for specific systems that support the respective add-on cards. These cards are u...
La Commission Nationale de l'Informatique et des Libertés (CNIL) précise les conditions de déploiement des caméras dites "touristiques" par les communes afin de garantir la protection de la vie privée.Suite à des contrÎles, la CNIL a constaté que des caméras installées par des communes à des fins de...
Taiwanâs National Security Agency states that the number of Chinese cyberattacks against the countryâs critical infrastructure increased by 6% in 2025, averaging 2.6 million attacks per day, Reuters reports.
The attacks mainly targeted the energy sector, hospitals, banks an...
Hackers have compromised a file transfer system at Sedgwickâs subsidiary that serves government agencies.
The post Sedgwick Confirms Cyberattack on Government Subsidiary appeared first on SecurityWeek.
France and Malaysia have launched investigations against Elon Muskâs AI chatbot Grok, after it generated sexualized deepfakes of women and minors, Techcrunch reports.
India has also demanded that X restrict Grokâs ability to generate âobscene, pornographic or pedophilicâ im...
Ilya Lichtenstein, convicted for the 2016 Bitfinex hack, has been released early from prison to home confinement
Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing threat actors to claim the namespace and upload malicious extensions. [...]
The botnet known as Kimwolf has infected more than 2 million Android devices by tunneling through residential proxy networks, according to findings from Synthient.
"Key actors involved in the Kimwolf botnet are observed monetizing the botnet through app installs, selling residential proxy bandwidth,...
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in December.
A new Python-based malware called VVS stealer has been identified, targeting Discord users with stealthy techniques to steal data