> TODAY'S SUMMARY (14 articles)
Today's cybersecurity landscape highlights several critical threats and developments. A flaw in Japan's SiteGuard WAF (CVE-2026-106931) is actively being exploited to gain root access, prompting urgent alerts. Similarly, a longstanding vulnerability in Broadcom's Wi-Fi software allows attackers within range to execute code on routers without authentication. Meanwhile, a breach at OpenCode may have compromised API keys for major AI providers, raising concerns over data exposure. Ransomware tactics are evolving, with attackers increasingly threatening employees' family members, as reported by Semperis. Additionally, a critical Linux vulnerability (CVE-2026-99999) could lead to guest-host escape attacks. Organizations are advised to update their systems and enhance security measures to mitigate these risks.
|
// AI-powered summary generated at 08:01
FreeBSD rtsold 15.x - Remote Code Execution via DNSSL
Le comtĂ© de Leduc a Ă©tĂ© la cible dâune cyberattaque dĂ©libĂ©rĂ©e de type rançongiciel, dĂ©tectĂ©e le 25 dĂ©cembre, qui a entraĂźnĂ© la dĂ©sactivation de plusieurs systĂšmes informatiques. Certains services, dont les courriels, les portails de permis et les formulaires en ligne, sont indisponibles, tandis quâu...
Le district scolaire d'Oakland Community School District 5 dans l'Illinois a subi une cyberattaque pendant les vacances, mais a réussi à contenir l'attaque et à restaurer les systÚmes sans payer de rançon. L'attaque n'a pas eu d'impact sur les étudiants ou le personnel, mais le district n'a pas préc...
OpenAI is testing a new ChatGPT feature called "Skills," which will be similar to Claude's feature, also called Skills. [...]
OSI Systems, Inc. suffered a data breach where certain files within their network were potentially accessed without authorization, resulting in unauthorized access to personal information including name and Social Security number. A cyberattack was claimed by INC Ransom on December 30, 2025.
Mullinax Automotive suffered a data breach between December 4, 2025, and December 25, 2025, resulting in unauthorized access to sensitive information. The breach affected Maine residents, including name, Social Security number, and driver's license number. A cyberattack was claimed by Dragonforce on...
How Do AI-Driven Cybersecurity Tools Transform Non-Human Identity Management? Where technology constantly evolves, how do organizations manage the security of their non-human identities (NHIs)? These machine identities play a crucial role, acting as both a gatekeeper and a potential security risk. U...
How Can Your Organization Ensure NHI Security with IAM Solutions? Have you ever wondered how secure your organizationâs machine identities are? Non-Human Identities (NHIs) play a crucial role, especially with the increasing dependency on cloud environments. With the advent of advanced Identity and A...
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
How Can Organizations Justify the Investment in AI Security Tools? Do the benefits of AI security tools truly justify their costs? Where organizations increasingly shift towards cloud environments, thereâs a growing need to address security gaps, especially concerning Non-Human Identities (NHIs). NH...
Session 7A: Network Security 2
Authors, Creators & Presenters: Kushal Babel (Cornell Tech & IC3), Andrey Chursin (Mysten Labs), George Danezis (Mysten Labs & University College London (UCL)), Anastasios Kichidis (Mysten Labs), Lefteris Kokoris-Kogias (Mysten Labs & IST Austria), Aru...
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
AI goes off the rails ⊠because of shoddy guardrails Researchers at Pen Test Partners found four flaws in Eurostar's public AI chatbot that, among other security issues, could allow an attacker to inject malicious HTML content or trick the bot into leaking system prompts. Their thank you from the co...
The U.S. seized the âweb3adspanels.orgâ domain and database used by cybercriminals to store stolen bank login credentials. The FBI seized the domain web3adspanels[.]org and its database after cybercriminals used it to store bank login credentials stolen from U.S. victims. A criminal group ran fake a...
via the cosmic humor & dry-as-interstellar-space wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD âSatellite Imageryâ appeared first on Security Boulevard.
A typosquatted domain impersonating the Microsoft Activation Scripts (MAS) tool was used to distribute malicious PowerShell scripts that infect Windows systems with the 'Cosmali Loader'. [...]
The software giant ServiceNow announced that it is acquiring the cyber firm Armis for $7.75 billion.
2025 was a stellar year for EFFâs award-winning podcast, âHow to Fix the Internet,â as our sixth season focused on the tools and technology of freedom.Â
It seems like everywhere we turn we see dystopian stories about technologyâs impact on our lives and our futuresâfrom tracking-based surveillance c...
Earlier this year, both chambers of Congress passed the TAKE IT DOWN Act. This bill, while well-intentioned, gives powerful people a new legal tool to force online platforms to remove lawful speech that they simply don't like.Â
The bill, sponsored by Senate Commerce Chair Ted Cruz (R-TX) and Rep. Ma...
Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that's delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple's Gatekeeper checks.
"Unlike earlier MacSync Stealer variants t...