> TODAY'S SUMMARY (35 articles)
Today's cybersecurity news highlights several significant threats and trends. A data breach involving compromised credentials has exposed the sensitive records of millions of California students. In the UK, the Electoral Commission is developing AI tools to combat deepfake manipulation in elections. Hackers have stolen customer data from the Russian hosting provider FirstVDS, exploiting software vulnerabilities. Additionally, stolen ConnectWise application credentials have led to unauthorized access to Microsoft 365 tenants, prompting service suspensions. A critical vulnerability in Broadcom's Wi-Fi software allows attackers within range to execute code without authentication. Lastly, ransomware threats have escalated to include intimidation tactics against employees’ families.
|
// AI-powered summary generated at 12:01
It took Sax well over a year to complete its investigation after detecting hackers on its network.
The post Top US Accounting Firm Sax Discloses 2024 Data Breach Impacting 220,000 appeared first on SecurityWeek.
Most modernization failures do not happen because leaders ignore risk. They happen because risk is misunderstood. Manual legacy refactoring feels controlled because it relies on...Read More
The post Is GenAI-Powered Modernization Safer Than Manual Legacy Refactoring? appeared first on ISHIR | Custom...
Frequently asked questions about five vulnerabilities in the Ingress NGINX Controller for Kubernetes, collectively known as IngressNightmare.
Background
The Tenable Security Response Team (SRT) has compiled this blog to answer Frequently Asked Questions (FAQ) regarding IngressNightmare.
FAQ
What is...
OWASP's new Agentic AI Top 10 highlights real-world attacks already targeting autonomous AI systems, from goal hijacking to malicious MCP servers. Koi Security breaks down real-world incidents behind multiple categories, including two cases cited by OWASP, showing how agent tools and runtime behavio...
In 2026, the question isn’t whether Kubernetes wins – it already has. And yet, many organizations are running mission-critical workloads on a platform they still treat as plumbing, not the operating layer that controls speed, security, and efficiency. Recent Cloud Native Computing Foundation (...
OpenAI is rolling out an update to ChatGPT on mobile that finally allows you to select the Thinking time toggle, also called "juice" of the model. [...]
Korean Air employee discloses a data breach after a hack of its catering and duty-free supplier, KC&D, affecting thousands of staff. Korean Air suffered a data breach after its in-flight catering supplier Korean Air Catering & Duty-Free (KC&D) was hacked, exposing personal data of ~30,00...
MongoDB Vulnerability CVE‑2025‑14847 Under Active Exploitation Worldwide A critical flaw in MongoDB’s network message decompression code, CVE‑2025‑14847 (dubbed “MongoBleed”), is being actively exploited to leak sensitive memory from vulnerable servers. Researchers report over 87,000 potentially exp...
A ransomware attack hit Oltenia Energy Complex (Complexul Energetic Oltenia), Romania's largest coal-based energy producer, on the second day of Christmas, taking down its IT infrastructure. [...]
A former Coinbase customer service agent was arrested in India for helping hackers earlier this year steal sensitive customer information from a company database. [...]
Bangalore is the beating heart of India’s technology landscape, a global hub where innovation, data, and enterprise operations converge at unprecedented scale. But a new report highlights a stark reality: as digital acceleration skyrockets, so do the cyber risks facing the multinational organization...
While the shortest distance between two points is a straight line, a straight-line attack on a large language model isn't always the most efficient — and least noisy — way to get the LLM to do bad things. That's why malicious actors have been turning to indirect prompt injection attacks on LL...
Pour ce calendrier de l'Avent 2025, découvrez 24 outils et solutions open source qui vont vous aider au quotidien, que ce soit à la maison ou au travail.
Le post Calendrier de l’Avent 2025 : 24 solutions et outils Open Source à découvrir a été publié sur IT-Connect.
The cybersecurity landscape has entered a dangerous new phase. Nation-state actors and sophisticated cybercriminals are orchestrating five to eight different Large Language Models simultaneously, creating adaptive breach campaigns that operate at machine speed. This represents the most dramatic tran...
The United States manufacturing sector is undergoing one of the most significant transformations in its history. As factories adopt Industry 4.0 technologies, decades-old production lines are being woven into modern digital ecosystems. Industrial control systems, robotics, sensors, and cloud analyti...
Last week’s cyber news in 2025 was not about one big incident. It was about many small cracks opening at the same time. Tools people trust every day behave in unexpected ways. Old flaws resurfaced. New ones were used almost immediately.
A common theme ran through it all in 2025. Attackers moved fast...
Korean Air experienced a data breach affecting thousands of employees after Korean Air Catering & Duty-Free (KC&D), its in-flight catering supplier and former subsidiary, was recently hacked. [...]
South Korean online retailer Coupang is defending its response to a major data breach by an insider, releasing more details of the investigation — including a MacBook recovered from a river bottom.
A recently disclosed MongoDB flaw (MongoBleed) is under active exploitation, with over 87,000 potentially vulnerable instances exposed worldwide. A newly disclosed MongoDB vulnerability, tracked as CVE-2025-14847Â (aka MongoBleed, CVSS score of 8.7), is being actively exploited, with more than 87,000...
Tracked as CVE-2020-12812, the exploited FortiOS flaw allows threat actors to bypass two-factor authentication.
The post Fortinet Warns of New Attacks Exploiting Old Vulnerability appeared first on SecurityWeek.