> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
The U.S. cyber defense agency issued an operational directive on Thursday mandating federal agencies to “remove any hardware and software devices that is no longer supported by its original equipment manufacturer.”
Several security issues were fixed in GLib.
This week, Joe cautions the rush to adopt AI tools rife with truly awful security vulnerabilities.
An alleged ransomware attack has taken down the systems of the Sapienza University of Rome.
CrashFix crashes browsers to coerce users into executing commands that deploy a Python RAT, abusing finger.exe and portable Python to evade detection and persist on high‑value systems.
The post New Clickfix variant ‘CrashFix’ deploying Python Remote Access Trojan appeared first on Microsoft Security...
A binding operational directive issued Thursday looks to combat an attack pathway that has been behind some of the biggest attacks and most common exploits in recent years.
The post CISA tells agencies to stop using unsupported edge devices appeared first on CyberScoop.
Microsoft announced today that the Exchange Web Services (EWS) API for Exchange Online will be shut down in April 2027, after nearly 20 years. [...]
Several security issues were fixed in Python.
Ce tutoriel explique comment installer et configurer What's Up Docker, une alternative à Watchtower pour mettre à jour les images Docker des conteneurs.
Le post What’s Up Docker (WUD) : gérez vos mises à jour de conteneurs Docker facilement a été publié sur IT-Connect.
Unit 42 researchers say an Asian threat group behind what they call the Shadow Campaigns has targeted government agencies in 37 countries in a wide-ranging global cyberespionage campaign that has involved phishing attacks and the exploitation of a more than a dozen known vulnerabilities.
The post T...
The distributed denial-of-service (DDoS) botnet known as AISURU/Kimwolf has been attributed to a record-setting attack that peaked at 31.4 Terabits per second (Tbps) and lasted only 35 seconds.
Cloudflare, which automatically detected and mitigated the activity, said it's part of a growing number of...
Rome's "La Sapienza" university has been targeted by a cyberattack that impacted its IT systems and caused widespread operational disruptions at the educational institute. [...]
Most security incidents happen in the gap between knowing what matters and actually implementing security controls consistently. Read how Microsoft is helping organizations close this implementation gap.
The post The security implementation gap: Why Microsoft is supporting Operation Winter SHIELD ap...
Several security issues were fixed in the Linux kernel.
L'Inspection nationale de la protection des données de Lettonie (DVI) a publié des éclaircissements sur les conditions d'accès par un employeur à la messagerie électronique professionnelle de ses salariés.L'employeur ne peut accéder au contenu de la messagerie d'un employé sans motif légitime, car c...
L'Office du Commissaire à l'information du Royaume-Uni (ICO) a sanctionné MediaLab.AI, Inc., propriétaire de la plateforme Imgur, pour des manquements liés à la protection des données des enfants.Une amende de 247 590 £ (environ 292 156 €) a été infligée à l'entreprise pour avoir traité illégalement...
Russian state-linked hackers are exploiting a Microsoft Office vulnerability to target maritime organizations across Europe as part of a “sophisticated espionage campaign," researchers said.
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) roumaine a publié une décision de sanction à l'encontre de Tensa Art Design S.A., comprenant le prononcé d'une amende de 20 000 €, pour un manquement à son obligation de coopération.Cette affaire débute pa...
Le Bureau du Commissaire à l'information (ICO) a communiqué sur l'entrée en vigueur de la nouvelle loi britannique sur l'utilisation et l'accès aux données (DUAA).Depuis le 5 février 2026, la plupart des dispositions de cette loi relatives à la protection des données sont applicables, à l'exception...
Orchid Security today added an ability to conduct audits to its platform that enables cybersecurity teams to track behaviors of specific identities. Company CEO Roy Katmor said Identity Audit is designed to make it possible to unify proprietary audit data captured from unmanaged applications with a...