> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
The government has withheld details of the investigation of Renee Goodâs killingâbut an unrelated case involving the ICE agent who shot her could force new revelations.
This is a video of advice for squid fishing in Puget Sound.
As usual, you can also use this squid post to talk about the security stories in the news that I havenât covered.
Blog moderation policy.
Officials at Cubic, the manufacturer of the gates, reportedly say their product has cameras that record for five seconds when someone neglects to pay a fare. Artificial intelligence is used to produce a physical description of suspected fare evaders, they say, and the description is sent to the MTA.
Six more vulnerabilities have been discovered in the n8n workflow platform used for building LLM-powered agents to connect business processes. Four of the six are rated as critical, carrying CVSS severity scores of 9.4.
âThese vulnerabilities span multiple attack classes, f...
Once. Someone named âVincenzo lozzoâ wrote to Epstein in email, in 2016: âI wouldnât pay too much attention to this, Schneier has a long tradition of dramatizing and misunderstanding things.â The topic of the email is DDoS attacks, and it is unclear what I am dramatizing and misunderstanding.
Rabbi...
Germany's domestic intelligence agency is warning of suspected state-sponsored threat actors targeting high-ranking individuals in phishing attacks via messaging apps like Signal. [...]
L'ordre du jour de la séance pléniÚre de la Commission nationale de l'informatique et des libertés (CNIL) du 5 février 2026 a été publié par la CNIL.
Partie I (avec débats):
* Communication relative aux conditions de recours, dans le cadre de la lutte contre les dépÎts sauvages, à des outils de c...
L'autorité italienne de protection des données (Garante) a sanctionné le Centre Hospitalier S. Pio de Bénévent pour avoir illégalement communiqué les données de santé d'un employé dans le cadre d'un contentieux interne.Suite à la plainte d'un employé, il a été établi que l'établissement avait transm...
A newly discovered toolkit called DKnife has been used since 2019 to hijack traffic at the edge-device level and deliver malware in espionage campaigns. [...]
Le Commissaire fédéral à la protection des données et à la liberté d'information (BfDI) a organisé un atelier de réflexion avec des experts pour discuter de l'articulation entre le RGPD et le RÚglement sur les données.Lors d'un échange le 5 février 2026, 13 représentants d'entreprises, d'association...
La Commission Nationale de l'Informatique et des Libertés (CNIL) expérimente un nouveau parcours utilisateur en ligne pour accompagner les personnes dans leurs démarches relatives aux fichiers d'incidents bancaires.Cette initiative répond aux 400 demandes d'informations annuelles reçues par l'autori...
The two-line letter to the CIA's director is the latest warning in recent years from a long-serving Democratic senator with knowledge of secret government programs and intelligence operations.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- SMB network file system;
- io_uring subsystem;
(CVE-2025-38561, CVE-2025-39698, CVE-2025-40...
The Cybersecurity & Infrastructure Security Agency (CISA) in the U.S. has issued a warning about CVE-2026-24423, an unauthenticated remote code execution (RCE) flaw in SmarterMail that is used in ransomware attacks. [...]
Threat actors using LLMs needed only eight minutes to move from initial access to full admin privileges in an attack on a company's AWS cloud environment in the latest example of cybercriminals expanding their use of AI in their operations, Sysdig researchers said.
The post Attackers Used AI to Bre...
DKnife is a Chinese made malware framework that targets Chinese-based users
Attackers may have snapped user locations and activity information, message warns Legacy image-sharing website Flickr suffered a data breach, according to customers emails seen by The Register.âŠ
Focus sur les Initial Access Brokers : ces pirates experts de la brÚche qui revendent l'accÚs aux réseaux d'entreprise. Comment font-ils ? Comment se protéger ?
Le post Initial Access Broker : leur rÎle clé dans les cyberattaques et les ransomwares a été publié sur IT-Connect.
The preliminary findings follow an investigation that began in February 2024 probing features such as âinfinite scroll, autoplay, push notifications, and its highly personalised recommender system,â the European Commission said in a press release.
UK leaps to sixth in global flood charts as mega-swarm unleashes 31.4 Tbps Yuletide pummeling Cloudflare says DDoS crews ended 2025 by pushing traffic floods to new extremes, while Britain made an unwelcome leap of 36 places to become the world's sixth-most targeted location.âŠ