> TODAY'S SUMMARY (124 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. ConnectWise has suspended its Cloud Backup service following a supply chain attack that compromised Microsoft 365 accounts, exposing sensitive customer data.
2. Hackers exploited vulnerabilities in Plex servers to deploy cryptocurrency miners and proxy software, emphasizing the urgency for users to apply security updates.
3. A breach in the OpenCode AI platform may have exposed API keys for major AI providers, including OpenAI and Google, raising concerns over data security in AI applications.
4. Malware campaigns are increasingly targeting popular software like AOMEI and WordPress plugins, indicating a rise in supply chain attacks.
5. Ongoing spyware incidents in Serbia highlight the political use of surveillance technologies ahead of elections, while phishing attacks on Microsoft brands are on the rise.
6. Critical vulnerabilities in various systems, including Oracle and Drupal, have been reported, underlining the need for timely patching and security measures.
Organizations should remain vigilant, prioritize patching, and enhance their defenses against evolving threats.
|
// AI-powered summary generated at 20:01
Session 7D: ML Security
Authors, Creators & Presenters: Ruyi Ding (Northeastern University), Tong Zhou (Northeastern University), Lili Su (Northeastern University), Aidong Adam Ding (Northeastern University), Xiaolin Xu (Northeastern University), Yunsi Fei (Northeastern University)
PAPER
Probe-...
This week on the Lock and Code podcast, we speak with Will Freeman about Automated License Plate Reader (ALPR) surveillance.
A cyberattack has forced a high school in central England to remain closed following the Christmas holidays.
On December 12, 2025, the MongoDB Security Engineering team disclosed a high-severity vulnerability in MongoDB that allows unauthenticated memory disclosure. The issue is tracked as CVE-2025-14847 and has a CVSS score of 8.7 and was quickly nicknamed MongoBleed in the security community due to the w...
The previous two articles deviated substantially from the content within Extreme Privacy, 5th Edition. This is because Apple added many new invasions to your privacy with their latest offering. While Apple devices are extremely secure, even more so than most Android devices in my opinion, this comes...
Much like the previous article, Extreme Privacy, 5th Edition also offered many privacy and security considerations for previous versions of iOS. That content is also pushing two years old now, so I am again overdue for an update. This article revisits that entire section for the recent changes with...
A breach affecting Manage My Health could have exposed sensitive data for up to 120,000 New Zealand patients
In Extreme Privacy, 5th Edition, I offered many privacy and security considerations for macOS. That content is pushing two years old now, so I am probably overdue for an update. This article revisits that entire section for the recent changes within macOS 26. The following assumes you are on macOS...
Ledger is informing some customers that their personal data has been exposed after hackers breached the systems of third-party payment processor Global-e. [...]
With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.
The post CISA KEV Catalog Expanded 20% in 2025, Topping 1,480 Entries appeared first on SecurityWeek.
The Kimwolf botnet has infected over 2 million Android devices, spreading mainly through residential proxy networks, researchers say. The Kimwolf botnet has compromised more than 2 million Android devices, spreading primarily via residential proxy networks, according to cybersecurity firm Synthient....
As agentic AI adoption accelerates, identity is emerging as the primary security challenge. Token Security explains why AI agents behave like a new class of identity and why CISOs must manage their access, lifecycle, and risk. [...]
The European Commission is looking “very seriously” into taking action against the social media platform X following an incident in which its artificial intelligence tool Grok was used to create sexually explicit images of a minor.
NordVPN denied allegations that its internal Salesforce development servers were breached, saying that cybercriminals obtained "dummy data" from a trial account on a third-party automated testing platform. [...]
Information published.
Several security issues were fixed in WebKitGTK.
It's January 2026, and Google is finding innovative new ways to make one of its services worse Important news for Gmail power users: Google is dropping the feature whereby Gmail can collect mail from other email accounts over POP3.…
Sedgwick Discloses Data Breach After TridentLocker Ransomware Attack Global claims management provider Sedgwick confirmed a cybersecurity incident affecting its federal contractor subsidiary, Sedgwick Government Solutions, after TridentLocker ransomware group claimed to have stolen 3.4GB of data on...
Artificial intelligence is transforming business models and competitive advantage. Leadership teams agree AI matters, but far fewer know how to turn AI potential into real,...Read More
The post What the CEO and C-Suite Must Ask Before Building an AI Enabled Enterprise appeared first on ISHIR | Custo...
You don’t lose most cyber battles to code. You lose them to culture: A rushed approval. A silent near-miss. A leader who shrugs at weak signals.
Tools don’t fix that. People do, when they understand risk, own it and act with discipline under pressure. That is what the Organ...