> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
Several security issues were fixed in MySQL.
libpng could be made to crash if it opened a specially crafted file.
Categories: Products & ServicesTags: Workspace
Inetutils could allow unintended access to network services.
Powertech Industrial a subi une cyberattaque, mais celle-ci n'a pas eu d'impact significatif sur ses opérations. Les mécanismes de défense et de récupération ont été activés et des experts externes ont été engagés pour aider à l'enquête et à la remédiation. L'entreprise continue d'améliorer la sécur...
Conpet, l'opérateur national de pipelines pétroliers de la Roumanie, a subi une cyberattaque qui a perturbé ses systèmes d'entreprise et mis hors ligne son site Web. L'incident n'a pas affecté les opérations de l'entreprise, mais a touché son infrastructure informatique et son site Web. Conpet enquê...
It was discovered that the RMI component of CRaC JDK 21 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung dis...
Le Ministère de la Science, de l'Innovation et des Universités a fermé partiellement son siège électronique en raison d'une incidence technique. Tous les actes administratifs en cours sont suspendus, mais les droits et intérêts légitimes des personnes concernées sont préservés. Les délais pour les d...
Transport Workers Union Local 100 experienced a data breach where an unauthorized third party accessed certain data files containing personal information, including names, dates of birth, social security numbers, and health insurance subscriber identification numbers. The breach occurred between Jan...
It was discovered that the RMI component of OpenJDK 21 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung disc...
A cyberattack was claimed by SilentRansomGroup on February 27.
It was discovered that the RMI component of OpenJDK 11 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung disc...
The group targets telecoms, critical infrastructure - all the usual high-value orgs Security researchers have attributed the Notepad++ update hijacking to a Chinese government-linked espionage crew called Lotus Blossom (aka Lotus Panda, Billbug), which abused weaknesses in the update infrastructure...
Secretaries of State are scrambling to replace cybersecurity services once provided by CISA and other federal agencies.
The post As feds pull back, states look inward for election security support appeared first on CyberScoop.
It was discovered that the RMI component of OpenJDK 8 would establish
RMI TCP endpoint connections to a remote host without setting an
endpoint identification algorithm. An unauthenticated remote attacker
could possibly use this issue to steal sensitive information.
(CVE-2026-21925)
Mingijung disco...
Microsoft has announced that the phase-out of NT LAN Manager (NTLM) is now transitioning to disabling the protocol by default, in an effort to increase security in Windows 11 and Windows Server.
NTLM is a series of security protocols that were introduced in the 1990s, but s...
A new GlassWorm malware attack through compromised OpenVSX extensions focuses on stealing passwords, crypto-wallet data, and developer credentials and configurations from macOS systems. [...]
Over 400 malicious OpenClaw packages were uploaded in days, using MoltBot skills to spread password-stealing malware. Researchers uncovered a large malware campaign abusing AI skills for Claude Code and Moltbot users. Between late January and early February 2026, more than 400 malicious skills were...
How modern infostealers target macOS systems, leverage Python‑based stealers, and abuse trusted platforms and utilities to distribute credential‑stealing payloads.
The post Infostealers without borders: macOS, Python stealers, and platform abuse appeared first on Microsoft Security Blog.
Ukraine's Computer Emergency Response Team (CERT) says that Russian hackers are exploiting CVE-2026-21509, a recently patched vulnerability in multiple versions of Microsoft Office. [...]