> TODAY'S SUMMARY (124 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. ConnectWise has suspended its Cloud Backup service following a supply chain attack that compromised Microsoft 365 accounts, exposing sensitive customer data.
2. Hackers exploited vulnerabilities in Plex servers to deploy cryptocurrency miners and proxy software, emphasizing the urgency for users to apply security updates.
3. A breach in the OpenCode AI platform may have exposed API keys for major AI providers, including OpenAI and Google, raising concerns over data security in AI applications.
4. Malware campaigns are increasingly targeting popular software like AOMEI and WordPress plugins, indicating a rise in supply chain attacks.
5. Ongoing spyware incidents in Serbia highlight the political use of surveillance technologies ahead of elections, while phishing attacks on Microsoft brands are on the rise.
6. Critical vulnerabilities in various systems, including Oracle and Drupal, have been reported, underlining the need for timely patching and security measures.
Organizations should remain vigilant, prioritize patching, and enhance their defenses against evolving threats.
|
// AI-powered summary generated at 20:01
En 2026, le support s'arrĂŞtera pour plusieurs produits et composants de chez Microsoft, dont Windows 11 24H2, Office 2021 et PowerShell 7.4 (LTS).
Le post Microsoft : quels sont les produits en fin de support en 2026 ? a été publié sur IT-Connect.
VVS Stealer is a Python-based malware that steals Discord credentials and tokens and has been sold on Telegram since at least April 2025. Palo Alto Networks researchers uncovered VVS Stealer, a Python-based malware that steals Discord credentials and tokens and has been sold on Telegram since at lea...
A list of topics we covered in the week of December 29 2025 to January 4 of 2026
Cybersecurity researchers have disclosed details of a new Python-based information stealer called VVS Stealer (also styled as VVS $tealer) that's capable of harvesting Discord credentials and tokens.
The stealer is said to have been on sale on Telegram as far back as April 2025, according to a repor...
A very happy New Year 2026 to you. Those of you who are familiar with my work know that I preach breach readiness, cyber resilience, and building practical capabilities to remain “unaffected” by cyberattacks. A lot of what I have written in 2025 came from how great wars were fought. There is still a...
As the AI-hype dust settles, CISOs have a lot to focus on 2026. From ongoing struggles such as ensuring teams are not burning out to current and future concerns, which includes finding effective business cases for AI, focusing on spotting a breach before it happens to planning...
Sedgwick confirmed a cyber incident at its federal contractor unit after TridentLocker claimed to steal 3.4GB of data. Sedgwick is a leading global claims management and risk services provider operating in the insurance and risk solutions sector. It employs roughly 33,000 people worldwide, across mo...
Chirag Shah, Global Information Security Officer & DPO at Model N examines how cyber risk in pharma and life sciences is shifting beyond traditional breaches toward data misuse, AI-driven exposure and regulatory pressure. He explains why executives still underestimate silent control failures, ho...
Security teams spend much of their time tracking vulnerabilities, abuse patterns, and system failures. A new study argues that many AI risks sit deeper than technical flaws. Cultural assumptions, uneven development, and data gaps shape how AI systems behave, where they fail, and who absorbs the harm...
How California's groundbreaking data deletion law signals a fundamental shift in enterprise identity lifecycle management—and why your SSO infrastructure matters more than ever
The post California’s DROP Platform Launches: What Enterprise B2B SaaS Companies Need to Know About Data Deletion Complianc...
OpenAEV is an open source platform designed to plan, run, and review cyber adversary simulation campaigns used by security teams. The project focuses on organizing exercises that blend technical actions with operational and human response elements, all managed through a single system. Scenarios as t...
In this Help Net Security video, Greg Pollock, Head of Research and Insights at UpGuard, discusses AI use inside organizations and the risks tied to insiders. He explains two problems. One involves employees who use AI tools to speed up work but share data with unapproved services. The other involve...
Welcome to the first episode of the Shared Security Podcast in 2026! As AI becomes increasingly integrated into technical fields such as software development and cybersecurity, traditional entry-level roles are evolving or disappearing. This episode discusses the implications of AI on entry-level kn...
Attribution isn’t about one clue — it’s about connecting many Attribution investigations almost never hinge on a single “gotcha” artifact. Most of the work happens in the messy middle: weak signals, partial identifiers, reused aliases, and contradictory breadcrumbs across environments. Security team...
Federated Identity optimiert Komfort und Sicherheit auf Kosten der Komplexität.PeachShutterStock | shutterstock.com
Im Kern der Enterprise Security steht die ZerreiĂźprobe zwischen Benutzerkomfort und Security-Anforderungen. Dabei handelt es sich um einen Balanceakt, der regelm...
Fehlerhaft konfigurierte Cloud-Dienste sorgen regelmäßig für Datenlecks – und schlimmeres.DC Studio | shutterstock.com
Konfigurationsfehler in der Cloud, die Unternehmensdaten gefährden, sind nicht unbedingt etwas Neues – eher im Gegenteil. Umso schlimmer, dass Unternehmen i...
Updated GrapheneOS Settings
Updated iOS 26 Settings