> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights two significant vulnerabilities. A critical Broadcom Wi-Fi flaw, present since 2010, enables attackers to gain unauthorized control of routers within Wi-Fi range without needing a password. This vulnerability was brought to light by researcher Quentin Kaiser at Hexacon. Additionally, a newly discovered Linux KVM guest-host escape vulnerability, rated 9.3, poses a serious risk, potentially offering a new avenue for attacks on Linux-based systems. Both issues underscore the ongoing need for vigilance and timely patching in network and virtualization environments.
|
// AI-powered summary generated at 04:00
The deal targets device visibility across IT, OT and medical systems as firms adapt to wider attack surfaces driven by AI and connectivity.
The post ServiceNow agrees to buy cyber firm Armis for $7.75B appeared first on CyberScoop.
Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that come with capabilities to intercept traffic and capture user credentials.
The extensions are advertised as a "multi-location network speed test plug-in" for de...
Rumors of a possible buyout surfaced earlier this month, with the official announcement coming just weeks after Armis announced raising $435 million.
The post ServiceNow to Acquire Armis for $7.75 Billion in Cash appeared first on SecurityWeek.
Explore data sanitization techniques and discover how proper sanitization improves test accuracy, protects privacy, and supports secure software development.
The post How to sanitize production data for use in testing appeared first on Security Boulevard.
Prioritizing what to fix first and why that really matters
Key takeaways
The 97% distraction: Discover why the vast majority of your "Critical" alerts are just theoretical noise, and how focusing strictly on the 3% of findings that represent real, exploitable risk can drastically improve your sec...
Amazon’s chief security officer Stephen Schmidt writes that since April 2024, the company has stopped over 1800 job applications suspected of coming from North Korean agents. The number of applications linked to North Korea has also increased by about 27% per quarter in 2025....
France’s postal service, La Poste, has been largely down for over twelve hours following a widespread network failure, reports The Register.
All of La Poste’s IT systems are reportedly affected, including the website, the digital document service Digiposte, a digital ID ser...
Two Chrome extensions in the Web Store named 'Phantom Shuttle' are posing as plugins for a proxy service to hijack user traffic and steal sensitive data. [...]
Microsoft Teams will automatically enable messaging safety features by default in January to strengthen defenses against content tagged as malicious. [...]
Security firm Proofpoint has discovered that hackers have found a clever way to bypass multi-factor authentication (MFA) and thereby get their hands on accounts belonging to corporate users.
In a nutshell, the hackers are using one-time codes from OAuth 2.0, an open standar...
Outsourcing critical IT and cybersecurity once looked like a shortcut to efficiency. Today, it is a shortcut to systemic fragility.
Breaches at one vendor now cascade across hundreds of organizations. A corporate decision framed as a cost-saving measure can trigger risks th...
Infosecurity has selected some of the key ransomware statistics for 2025
Forensic Focus, in collaboration with Northumbria University, has launched the Forensic Focus International Well-Being Study, inviting current and former Digital Forensic Investigators (DFIs) — and professionals working in digital-forensic environments — to take part in an anonymous online survey ex...
Critical n8n RCE vulnerability enables full server compromise A critical remote code execution flaw in the n8n workflow automation platform, tracked as CVE-2025-68613 (CVSS 9.9), allows authenticated users to inject expressions that escape the workflow sandbox and execute arbitrary OS commands on th...
Malware peddlers are targeting infosec enthusiasts, budding security professionals, and aspiring hackers with the Webrat malware, masquerading the threat as proof-of-concept (PoC) exploits for known vulnerabilities. Delivering the malware The recently uncovered Webrat can steal data from Telegram, D...
A US federal securities class action lawsuit has alleged that South Korean ecommerce giant Coupang took nearly a month to disclose a massive data breach to regulators, violating SEC rules that require companies to report material cybersecurity incidents within four business da...
Hacktivists have scraped almost 100% of the content available on Spotify. Is there anything users need to worry about?
The French national postal service's online services were knocked offline by "a major network incident" on Monday, disrupting digital banking and other services for millions. [...]
The personal information of 21,000 customers was stolen after hackers compromised Red Hat’s GitLab instances.
The post Nissan Confirms Impact From Red Hat Data Breach appeared first on SecurityWeek.
The cybercriminals attempted to steal $28 million from compromised bank accounts through phishing.
The post Feds Seize Password Database Used in Massive Bank Account Takeover Scheme appeared first on SecurityWeek.