> TODAY'S SUMMARY (124 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. ConnectWise has suspended its Cloud Backup service following a supply chain attack that compromised Microsoft 365 accounts, exposing sensitive customer data.
2. Hackers exploited vulnerabilities in Plex servers to deploy cryptocurrency miners and proxy software, emphasizing the urgency for users to apply security updates.
3. A breach in the OpenCode AI platform may have exposed API keys for major AI providers, including OpenAI and Google, raising concerns over data security in AI applications.
4. Malware campaigns are increasingly targeting popular software like AOMEI and WordPress plugins, indicating a rise in supply chain attacks.
5. Ongoing spyware incidents in Serbia highlight the political use of surveillance technologies ahead of elections, while phishing attacks on Microsoft brands are on the rise.
6. Critical vulnerabilities in various systems, including Oracle and Drupal, have been reported, underlining the need for timely patching and security measures.
Organizations should remain vigilant, prioritize patching, and enhance their defenses against evolving threats.
|
// AI-powered summary generated at 20:01
Alerte sur l’achat d’insiders : des employés payés par des pirates pour offrir leur accés professionnel....
Novembre 2025, un fichier présenté comme la liste des détenteurs d’armes en France circule à la vente dans un blackmarket. Trois mois plus tard, un nouveau licencié a été braqué chez lui....
A deep dive comparing API Keys, OAuth 2.0, JWT, and HMAC for CTOs. Learn which api authentication method fits your enterprise SSO and IAM strategy.
The post API Authentication Methods Explained: API Keys, OAuth, JWT & HMAC Compared appeared first on Security Boulevard.
Learn how to secure Model Context Protocol deployments using post-quantum decentralized identifiers for autonomous tool calling and ai agent security.
The post Post-Quantum Decentralized Identifiers for Autonomous Tool Calling appeared first on Security Boulevard.
Une vulnérabilité a été découverte dans MariaDB. Elle permet à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
Learn what passkeys are, how they use public key cryptography for account login, and why they are replacing legacy passwords in software development and ciam.
The post What is a Passkey for Account Login? appeared first on Security Boulevard.
De multiples vulnérabilités ont été découvertes dans les produits Qnap. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Nouvelle fuite Adecco en décembre 2025 ? Un pirate parle d'un accés et l'exfiltration de 750.000 CV....
Are Cybersecurity Teams Ready for the Era of Non-Human Identities? The digital transformation has introduced numerous complexities, especially in cybersecurity. One of the emerging topics is the management of Non-Human Identities (NHIs), a concept that remains at the forefront for many cybersecurity...
How Does Managing Non-Human Identities Enhance Cloud Security? What steps should organizations take to effectively secure their cloud environments with Non-Human Identities (NHIs)? This question is critical for many Chief Information Security Officers (CISOs) and cybersecurity professionals who grap...
An end of year summary for Hacking the Cloud in 2025.
How Can Non-Human Identities Improve AI Security? Are you confident that your organization is addressing all potential cybersecurity challenges? With the rapid adoption of artificial intelligence across industries, the necessity of fortifying AI security is undisputed. Yet, a particular aspect that...
How Secure Are Your Non-Human Identities? Are your organization’s non-human identity (NHI) security measures truly impenetrable? With digital becomes even more intricate, the management of NHIs is increasingly essential for protecting assets. NHIs, essentially machine identities, have the vital role...
Several vulnerabilities were discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed XCF, JPEG 2000 or PNM files are opened. For the oldstable distribution (bookworm), these problems have been fixed
Also, Korean Air hacked, EmEditor installer hijacked, a perfect 10 router RCE vuln, and more infosec in brief The Trump administration has cleared a trio of individuals sanctioned by the Biden administration for involvement with the Intellexa spyware consortium behind the Predator surveillance tool...
Resecurity caught ShinyHunters (SLH) using decoy accounts; the group attacked airlines, telecoms, and law enforcement in Sept 2025. In an interesting development, Resecurity has caught actors known as “ShinyHunters” or “Scattered Lapsus$ Hunters” (SLH) leveraging honeypot (decoy) accounts. The compa...
Session 7D: ML Security
Authors, Creators & Presenters: Tianpei Lu (The State Key Laboratory of Blockchain and Data Security, Zhejiang University), Bingsheng Zhang (The State Key Laboratory of Blockchain and Data Security, Zhejiang University), Xiaoyuan Zhang (The State Key Laboratory of Blockc...
In light of the tragic events that have occurred in Venezuela, what is happening to the Internet in the country, and how are users accessing it? Yesterday, the United States launched a “large scale strike” in Venezuela, capturing Venezuelan President Nicolas Maduro and his wife. Former Venezuelan l...
Information published.
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Evasive Panda APT poisons DNS requests to deliver MgBot  Spearphishing Campaign Abuses npm Registry to Target U.S. and Allied Manufacturing and He...