> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
If seconds of violent footage can cause lasting PTSD, what does daily exposure do to digital forensic investigators? Paul Gullon-Scott examines the hidden psychological cost of confronting traumatic content day after day.
In a recent incident, attackers abused a legitimate but vulnerable Windows kernel driver to shut down endpoint security tools during an ongoing incident response.
According to a Huntress report, the activity was observed during a customer investigation in early 2026 and inv...
Hackers associated with the Chinese government used a Trojaned version of Notepad++ to deliver malware to selected users.
Notepad++ said that officials with the unnamed provider hosting the update infrastructure consulted with incident responders and found that it remained compromised until Septembe...
0apt simule-t-il un ransomware et des « fuites » en données aléatoires, pour pousser au paiement....
Attackers are leaning on a new EDR killer malware that can shut down 59 widely used endpoint security products by misusing a kernel driver that once shipped with Guidance Softwareâs EnCase digital forensics tool, Huntress researchers warn. This particular driver is legitimate but its certificate exp...
Actions by authorities from Italy, Romania, Spain, the United Kingdom, Canada, Kosovo and South Korea, supported by Eurojust and Europol, led to the seizure of multiple illegal streaming services. A total of 31 suspected members have been linked to the operation. The group engaged in unauthorised di...
When businesses are getting started, what are the cybersecurity mistakes they need to avoid? We asked an expert to find out.
Researchers at Check Point link âAmarath-Dragonâ attacks to prolific Chinese cyber-espionage operation
Right on cue, petulant hacktivists attempt to disrupt yet another global sporting event Italy's foreign minister says the country has already started swatting away cyberattacks from Russia targeting the Milano Cortina Winter Olympics.âŠ
Patch meant to close a severe expression bug fails to stop attackers with workflow access Multiple newly disclosed bugs in the popular workflow automation tool n8n could allow attackers to hijack servers, steal credentials, and quietly disrupt AI-driven business processes.âŠ
Die Buhlmann Group wurde von einer Ransomware-Bande angegriffen. Der Hauptsitz in Deutschland ist jedoch verschont geblieben.Buhlmann Group
Akira zĂ€hlt zu den gefĂ€hrlichsten Ransomware-Gruppen und ist bekannt fĂŒr zahlreiche Angriffe auf deutsche Unternehmen. Nun hat es offen...
Todayâs âAI everywhereâ reality is woven into everyday workflows across the enterprise, embedded in SaaS platforms, browsers, copilots, extensions, and a rapidly expanding universe of shadow tools that appear faster than security teams can track. Yet most organizations still rely on legacy controls...
A California city pulled the plug on its entire ALPR system when it found Flock had shared data with hundreds of agencies without permission.
The vulnerability could allow attackers to execute arbitrary commands and steal credentials and other secrets.
The post Critical N8n Sandbox Escape Could Lead to Server Compromise appeared first on SecurityWeek.
Action depends on truth. Truth is hard to come by. Thereâs an old trope: âYou canât protect what you canât see.â This burning need for total visibility has led to an abundance of security data across every domain. But abundance doesnât equal clarity. One tool says a device is patched, another says...
Hackers stole email addresses and other personal information from 1.4 million accounts after breaching the systems of automated investment platform Betterment in January. [...]
Palo Alto Networks has not attributed the APT activity to any specific country, but evidence points to China.
The post Cyberspy Group Hacked Governments and Critical Infrastructure in 37 Countries appeared first on SecurityWeek.
Following a series of high-profile cyberattacks, boards of directors are now requiring their organizations to take greater responsibility for the risks posed by enterprise resource planning (ERP) systems pose after a series of high-profile cyberattacks. The Jaguar Land Rover (JLR), incident in Sept....
In 2025 a threat group compromised government and critical infrastructure in 37 countries, with reconnaissance in 155.
The post The Shadow Campaigns: Uncovering Global Espionage appeared first on Unit 42.
Cisco Talos uncovered âDKnife,â a fully featured gateway-monitoring and adversary-in-the-middle (AitM) framework comprising seven Linux-based implants.