> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
De multiples vulnérabilités ont été découvertes dans GLPI. Certaines d'entre elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une injection SQL (SQLi) et une falsification de requêtes côté serveur (SSRF).
La société Gozo Channel a été victime d'une attaque cybernétique qui a perturbé ses systèmes informatiques internes, mais les opérations de ferry n'ont pas été affectées. Les équipes techniques travaillent à rétablir les systèmes administratifs touchés et à assurer le retour à une pleine capacité op...
In May 2025, Red Hat Enterprise Linux 10 (RHEL) shipped with the first steps toward post-quantum cryptography (PQC) to protect against attacks by quantum computers, which will make attacks on existing classic cryptographic algorithms such as RSA and elliptic curves feasible. Cryptographically releva...
A cyberattack was claimed by Play on February 7.
Master Millwork, LLC experienced a data security incident between February 1, 2026, and February 5, 2026, resulting in unauthorized access to certain information. The types of information potentially affected include names, Social Security numbers, driver's license/state ID numbers, and financial ac...
En tant que service numérique innovant, performant et flexible, l’IA générative est progressivement intégrée à l’éventail d’outils et de services auxquels sont susceptibles de recourir les attaquants informatiques quel que soit leur profil. Des modèles d’IA générative sont ainsi utilisées et/ou...
La société Gex Corporation a annoncé avoir été victime d'une attaque par rançongiciel sur ses serveurs. L'incident a été découvert le 4 février, lorsque des fichiers sur certains de ses serveurs ont été chiffrés, et a été confirmé comme étant une attaque par rançongiciel.
Don't relax: This is a 'when, not if' scenario AI agents and other systems can't yet conduct cyberattacks fully on their own - but they can help criminals in many stages of the attack chain, according to the International AI Safety report.…
Senator Maria Cantwell, D-Wash., wants hearings to force AT&T and Verizon to disclose how they’ve responded to the hacks to protect telecom networks.
The post Cantwell claims telecoms blocked release of Salt Typhoon report appeared first on CyberScoop.
Moltbot, the viral AI agent, offers immense power but is riddled with critical vulnerabilities, including remote code execution (RCE), exposed control interfaces, and malicious extensions. Read on to understand the vulnerabilities associated with Moltbot and the immediate security practices users mu...
Several security issues were fixed in Filelock.
Several security issues were fixed in FreeRDP.
How Do Non-Human Identities Reinforce Data Protection? How does one ensure that machine identities remain secure from cyber threats? This query emerges as organizations navigate the intricate web of digital systems, grappling with data protection complexities. The management of Non-Human Identities...
Are Organizations Fully Equipped to Manage Their Non-Human Identities (NHIs) Efficiently? Ensuring robust management of Non-Human Identities (NHIs) is a top priority for organizations. NHIs, essentially machine identities, play a critical role in organizational cybersecurity strategies. They consist...
Step Finance announced that it lost $40 million worth of digital assets after hackers compromised devices belonging to the company's team of executives. [...]
What Makes Non-Human Identities Critical for Cloud Security? Have you considered how organizations can effectively secure their digital assets in cloud platforms? While we delve deeper into the digital space, the focus on securing data through robust Non-Human Identity (NHI) management has become pa...
Are You Leveraging Agentic AI for Enhanced Financial Security? Businesses across various sectors are increasingly relying on Agentic AI to bolster their financial security measures. But what exactly is Agentic AI, and why is it swiftly becoming an integral part of cybersecurity frameworks, especiall...
Nick Andersen, a top CISA official, discussed plans for improving CIPAC and developing an AI-ISAC.
The post What’s next for DHS’s forthcoming replacement critical infrastructure protection panel, AI information sharing appeared first on CyberScoop.
“I think that we'll have some news on CIRCIA in pretty short order, in the next couple of weeks, hopefully,” Nick Andersen, executive assistant director for cybersecurity at CISA, told reporters.
Limited attacks occurred prior to Ivanti’s disclosure, followed by mass exploitation by multiple threat groups. More than 1,400 potentially vulnerable instances remain exposed.
The post Ivanti’s EPMM is under active attack, thanks to two critical zero-days appeared first on CyberScoop.