> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
The Notepad++ supply chain attack — unnoticed execution chains and new IoCs Kaspersky details multiple distinct infection chains observed in the Notepad++ update compromise, including rotating C2 infrastructure, changing delivery tooling, and targeting a small set of victims rather than broad distri...
Flaws in GitHub Codespaces allow RCE via crafted repositories or pull requests
Unit 42 tracked the compromise of at least 70 institutions across the 37 countries — with the hackers maintaining access to some victims for months. In one country, the hackers gained access to the parliament and a senior elected official.
Multiple Italian foreign ministry offices and facilities associated with the Winter Games were targeted by attacks.
Denis Ledoux discovered that Python incorrectly parsed email message
headers. An attacker could possibly use this issue to inject arbitrary
headers into email messages. This issue only affected python3.6, python3.7,
python3.8, python3.9, python3.10, python3.11, python3.12, python3.13, and
python3.14...
Criminals are using AI to clone professional websites at an industrial scale. A new report shows how one AI-powered network grew to 150+ domains by hiding behind Cloudflare and rotating IP ranges.
The post Researchers Expose Network of 150 Cloned Law Firm Websites in AI-Powered Scam Campaign appeare...
ESET PROTECT On-Prem hotfix version 13.0.12.0 has been released.
The number of DDoS attacks more than doubled in 2025. The network layer is under particular threat as hyper-volumetric attacks grew 700%.
As the enterprise world shifts from chatbots to autonomous systems, Operant AI on Thursday launched Agent Protector, a real-time security solution designed to govern and shield artificial intelligence (AI) agents. The launch comes at a critical inflection point for corporate technology. Gartner pre...
The DEAD#VAX campaign tricks users into installing AsyncRAT by disguising a virtual hard disk as a PDF attachment.
VS Code-integrated configuration files are automatically executed in Codespaces when the user opens a repository or pull request.
The post VS Code Configs Expose GitHub Codespaces to Attacks appeared first on SecurityWeek.
Cellebrite data confirms digital evidence is now central to almost all cases
It was discovered that GLib incorrectly parsed large Base64 data. An
attacker could use this issue to cause GLib to crash, resulting in a
denial of service, or possibly execute arbitrary code. (CVE-2026-1484)
It was discovered that GLib incorrectly parsed certain treemagic files.
An attacker could...
This latest infusion, led by SYN Ventures, brings the company’s total funding to $16.9 million.
The post Nullify Secures $12.5 Million in Seed Funding for Cybersecurity AI Workforce appeared first on SecurityWeek.
This week didn’t produce one big headline. It produced many small signals — the kind that quietly shape what attacks will look like next.
Researchers tracked intrusions that start in ordinary places: developer workflows, remote tools, cloud access, identity paths, and even routine user actions. Noth...
Newsletter platform Substack is notifying users of a data breach after attackers stole their email addresses and phone numbers in October 2025. [...]
Italy has foiled a series of cyberattacks targeting some of its foreign ministry offices, including one in Washington.
The post Italy Averted Russian-Linked Cyberattacks Targeting Winter Olympics Websites, Foreign Minister Says appeared first on SecurityWeek.
Operation Switch off frappe un réseau IPTV illégal, 31 suspects, saisies et blanchiment via cryptomonnaies....
Todd C. Miller, qui maintient sudo depuis plus de 30 ans, a besoin de soutien : c'est dans l'intérêt de tous, car son projet open source est vital pour Linux.
Le post Linux : l’unique mainteneur du projet sudo a besoin de soutien et c’est dans l’intérêt de tous ! a été publié sur IT-Connect.
The malware is known for dropping ransomware and other payloads, and for abusing infected machines to proxy traffic.
The post SystemBC Infects 10,000 Devices After Defying Law Enforcement Takedown appeared first on SecurityWeek.