> TODAY'S SUMMARY (35 articles)
Today's cybersecurity news highlights several significant threats and trends. A data breach involving compromised credentials has exposed the sensitive records of millions of California students. In the UK, the Electoral Commission is developing AI tools to combat deepfake manipulation in elections. Hackers have stolen customer data from the Russian hosting provider FirstVDS, exploiting software vulnerabilities. Additionally, stolen ConnectWise application credentials have led to unauthorized access to Microsoft 365 tenants, prompting service suspensions. A critical vulnerability in Broadcom's Wi-Fi software allows attackers within range to execute code without authentication. Lastly, ransomware threats have escalated to include intimidation tactics against employees’ families.
|
// AI-powered summary generated at 12:01
The high-severity vulnerability is under active exploitation and affects many versions of MongoDB, a nearly ubiquitous open-source database.
The post MongoBleed defect swirls, stamping out hope of year-end respite appeared first on CyberScoop.
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) roumaine a publié une décision de sanction à l'encontre de l'Ordre des infirmiers généralistes, des sages-femmes et des assistants médicaux de Roumanie – Filiale de Neamț, comprenant le prononcé d'une amen...
Some time ago I mentioned that we went through the curl source code and eventually got rid of all strncpy() calls. strncpy() is a weird function with a crappy API. It might not null terminate the destination and it pads the target buffer with zeroes. Quite frankly, most code bases are probably bette...
A ransomware attack hit Romania’s Oltenia Energy Complex on December 26, knocking out IT systems at the country’s largest coal power producer. A ransomware attack disrupted Oltenia Energy Complex, Romania’s largest coal-based power producer, shutting down its IT systems on December 26. The Oltenia E...
There's more where that came from, CEO says Rogue insiders suspected of taking bribes to hand over Coinbase customer records to criminals are beginning to face justice, according to CEO Brian Armstrong.…
KrebsOnSecurity.com celebrates its 16th anniversary today! A huge "thank you" to all of our readers -- newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme runni...
Session 7C: Secure Protocols
Authors, Creators & Presenters: Xuanji Meng (Tsinghua University), Xiao Sui (Shandong University), Zhaoxin Yang (Tsinghua University), Kang Rong (Blockchain Platform Division，Ant Group), Wenbo Xu (Blockchain Platform Division，Ant Group), Shenglong Chen (Blockchain...
Two banks have informed regulators in Maine that recent data breaches were sourced back to a cyberattack on Marquis Software.
A Lithuanian national has been arrested for his alleged involvement in infecting 2.8 million systems with clipboard-stealing malware disguised as the KMSAuto tool for illegally activating Windows and Office software. [...]
Extortion group Lovely claims to have stolen 40 million pieces of info from publisher Conde Nast A criminal group is beating Conde Nast over the head for not responding sooner to its extortion attempt by posting stolen subscribers' email and home addresses and warning the publisher of Wired, The New...
A high-severity flaw in MongoDB instances could allow unauthenticated remote bad actors to leak sensitive data from MongoDB servers. Dubbed "MongoBleed," the security flaw is being exploited in the wild after a PoC exploit and technical details were published. MongoDB has released patches to protec...
L'Agence espagnole de protection des données (AEPD) a publié une décision constatant une infraction de l'Agence d'État Conseil supérieur de la recherche scientifique (CSIC) pour des manquements liés à la mise en place d'un système de géolocalisation de véhicules.Cette affaire débute par une plainte...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Website Task Flowchart’ appeared first on Security Boulevard.
La Commission Nationale de l'Informatique et des Libertés (CNIL) précise le cadre juridique applicable aux annuaires en ligne qui intègrent des systèmes de notation et de commentaires concernant les professionnels.La publication de données professionnelles dans de tels annuaires ne requiert pas syst...
Le Préposé fédéral allemand à la protection des données et à la liberté d'information (BfDI) a publié un guide intitulé "L'IA dans les administrations - Penser à la protection des données dès le départ", destiné aux organismes publics fédéraux.Ce document vise à aider les entités publiques à identif...
France’s data protection regulator has fined the software company Nexpublica France €1.7 million ($2 million) for poor cybersecurity practices in the wake of a data breach.
Ce tutoriel explique comment configurer la stratégie d'audit et les SACL pour savoir qui a accédé à quel fichier et à quelle heure sur un partage Windows.
Le post Serveurs de fichiers : configurer l’audit d’accès aux fichiers et dossiers sur Windows Server a été publié sur IT-Connect.
Trust Wallet says attackers who compromised its browser extension right before Christmas have drained approximately $7 million from nearly 3,000 cryptocurrency wallet addresses. [...]
It's no secret that digital surveillance and other tech-enabled oppressions are acute dangers for liberation movement workers. The rising tides of tech-fueled authoritarianism and hyper-surveillance are universal themes across the various threat models we consider. EFF's Surveillance Self-Defense pr...
EFF’s attorneys, activists, and technologists don’t just do the hard, endless work of defending our digital civil liberties — they also spend a lot of time and effort explaining that work to the public via media interviews.Â
EFF had thousands of media mentions in 2025, from the smallest hyperlocal o...