> TODAY'S SUMMARY (35 articles)
Today's cybersecurity news highlights several significant threats and trends. A data breach involving compromised credentials has exposed the sensitive records of millions of California students. In the UK, the Electoral Commission is developing AI tools to combat deepfake manipulation in elections. Hackers have stolen customer data from the Russian hosting provider FirstVDS, exploiting software vulnerabilities. Additionally, stolen ConnectWise application credentials have led to unauthorized access to Microsoft 365 tenants, prompting service suspensions. A critical vulnerability in Broadcom's Wi-Fi software allows attackers within range to execute code without authentication. Lastly, ransomware threats have escalated to include intimidation tactics against employees’ families.
|
// AI-powered summary generated at 12:01
Microsoft is rolling out GPT 5.2 to Copilot on the web, Windows, and mobile as a free upgrade, and it'll coexist with the GPT 5.1 model. [...]
The ecommerce giant will provide purchase vouchers to the 33.7 million individuals impacted by the incident.
The post Coupang to Issue $1.17 Billion in Vouchers Over Data Breach appeared first on SecurityWeek.
Artificial Intelligence (AI) overlords are a common trope in science-fiction dystopias, but the reality looks much more prosaic. The technologies of artificial intelligence are already pervading many aspects of democratic government, affecting our lives in ways both large and small. This has occurre...
From university breaches to cyberattacks that shut down whole supply chains, these were the worst cybersecurity incidents of the year.
Hackers stole names, addresses, Social Security numbers, ID numbers, and medical and health insurance information from Aflac’s systems.
The post 22 Million Affected by Aflac Data Breach appeared first on SecurityWeek.
Windows isn’t the only target anymore. In 2025, malware increasingly targeted Android, macOS, and multiple platforms at once.
For the latest discoveries in cyber research for the week of 29th December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Romanian Waters, the country’s national water management authority, was hit by a ransomware attack that resulted in nearly 1,000 computer systems acr...
The ‘download’ button on the official EmEditor website served a malicious installer.
The post Infostealer Malware Delivered in EmEditor Supply Chain Attack appeared first on SecurityWeek.
Fortinet has warned customers that threat actors are still actively exploiting a critical FortiOS vulnerability that allows them to bypass two-factor authentication (2FA) when targeting vulnerable FortiGate firewalls. [...]
Privacy may be dead, but civilians are turning conventional wisdom on its head by surveilling the cops as much as the cops surveil them.
The React 19 library for building application interfaces was hit with a remote code vulnerability, React2Shell, about a month ago. However, as researchers delve deeper into the bug, the larger picture gradually unravels.
The vulnerability enables unauthenticated remote code...
The final weeks of 2025 did not arrive quietly. A single software flaw rippled across the internet, healthcare providers disclosed deeply personal data exposures, and millions of everyday devices quietly joined large scale attacks. As we step into 2026, the ColorTokens Threat Advisory brief captures...
From Donald Trump to DOGE to Chinese hackers, this year the internet's chaos caused outsized real-world harm.
Synthesia’s AI avatars revolutionizing digital media with realism and consent. Learn how these advancements impact trust and user experience.
The post Creating Hyperrealistic Deepfakes: The Challenges of Labeling appeared first on Security Boulevard.
Tech companies are increasingly warning their customers that they have been targeted by governments with advanced government spyware, such as NSO's Pegasus or Paragon's Graphite. What happens after receiving a threat notification?
As 2025 draws to a close, Tony looks back at the cybersecurity stories that stood out both in December and across the whole of this year
Dubbed MongoBleed, the high-severity flaw allows unauthenticated, remote attackers to leak sensitive information from MongoDB servers.
The post Fresh MongoDB Vulnerability Exploited in Attacks appeared first on SecurityWeek.
Cybersecurity researchers have disclosed details of what has been described as a "sustained and targeted" spear-phishing campaign that has published over two dozen packages to the npm registry to facilitate credential theft.
The activity, which involved uploading 27 npm packages from six different n...
Une faille de sécurité, surnommée MongoBleed (CVE-2025-14847), affecte plus de 87 000 instances MongoDB exposées sur le Web. Voici comment se protéger.
Le post MongoBleed : cette faille de sécurité expose les secrets de 87 000 serveurs MongoDB a été publié sur IT-Connect.
A hacker named Lovely made public 2.3 million records representing Wired subscriber information.
The post Hacker Claims Theft of 40 Million Condé Nast Records After Wired Data Leak appeared first on SecurityWeek.