> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights two significant vulnerabilities. A critical Broadcom Wi-Fi flaw, present since 2010, enables attackers to gain unauthorized control of routers within Wi-Fi range without needing a password. This vulnerability was brought to light by researcher Quentin Kaiser at Hexacon. Additionally, a newly discovered Linux KVM guest-host escape vulnerability, rated 9.3, poses a serious risk, potentially offering a new avenue for attacks on Linux-based systems. Both issues underscore the ongoing need for vigilance and timely patching in network and virtualization environments.
|
// AI-powered summary generated at 04:00
NordVPN has warned that malicious postal service websites have surged by 86% over the past month, targeting holiday delivery tracking
Session 6D: Software Security: Vulnerability Detection
Authors, Creators & Presenters: Qi Ling (Purdue University), Yujun Liang (Tsinghua University), Yi Ren (Tsinghua University), Baris Kasikci (University of Washington and Google), Shuwen Deng (Tsinghua University)
PAPER
GadgetMeter: Quantita...
An analysis of holiday bot attack behavior during Cyber 5, including scraping, ATO, and automation trends that persist beyond peak sales.
The post 2025 Holiday Bot Attack Trends appeared first on Security Boulevard.
Romanian Waters (Administrația Națională Apele Române), the country's water management authority, was hit by a ransomware attack over the weekend. [...]
A Ukrainian national pleaded guilty in U.S. federal court to one charge stemming from attacks using Nefilim ransomware on companies in the U.S., Canada and Australia.
(written jointly with Tim Peacock)
Five years. It’s enough time to fully launch a cloud migration, deploy a new SIEM, or — if you’re a very large enterprise — just start thinking about doing the first two. It’s also how long Tim and I have been subjecting the world to our thoughts on Cloud Security...
Ukrainian Artem Stryzhak (35) pleaded guilty in the U.S. for Nefilim ransomware attacks; he was arrested in Spain in 2024, extradited in April 2025. A 35-year-old Ukrainian, Artem Aleksandrovych Stryzhak (35), pleaded guilty in the U.S. for Nefilim ransomware attacks. The Ukrainian citizen was arres...
DataDome recognized in The Bot And Agent Trust Management Software Landscape, Q4 2025 from Forrester
Forrester has just released The Bot And Agent Trust Management Software Landscape, Q4 2025 report. It marks a fundamental shift to reflect the rapid rise of agentic AI traffic—moving beyond tradit...
Cisco email security products actively targeted in zero‑day campaign Security researchers are reporting active exploitation of a critical, unpatched zero‑day vulnerability (CVE‑2025‑20393) in Cisco AsyncOS‑based email security appliances by a China‑linked advanced persistent threat group. The campai...
Shannon Miller shares her approach to creating domestic safety and a call to the cyber community to help reduce harm.
The post Rising Tides: When Cybersecurity Becomes Personal – Inside the Work of an OSINT Investigator appeared first on SecurityWeek.
The leaked internal chat communications of the Black Basta ransomware group offer an unprecedented view into how cybercriminals operate, plan attacks, and evade detection. The Veriti Research team analyzed these chat logs, revealing our favorite exploits, security measures they bypass, and the defe...
Information published.
Information published.
Open-source server monitoring tool, Nezha, is being exploited by attackers for remote system control
The Clop ransomware gang has stolen the data of nearly 3.5 million University of Phoenix (UoPX) students, staff, and suppliers after breaching the university's network in August. [...]
Anna’s Archive, c'est le nom d'un collectif qui affirme être parvenu à sauvegarder la quasi-totalité de la bibliothèque musicale de Spotify : 300 To de données.
Le post Anna’s Archive a aspiré tout le catalogue de Spotify : 86 millions de fichiers audio volés ! a été publié sur IT-Connect.
Banque Postale : accès aux comptes perturbé le 22 décembre, DDoS évoqué ; BPCE aussi touché par des incidents techniques....
A feature update of ESET Mail Security for Microsoft Exchange Server 12.1.10007.0 has been released.
Coupang disclosed a data breach affecting 33.7 million customers after unauthorized access to personal data went undetected for nearly five months. Penta Security explains how the incident highlights insider credential abuse risks and why encrypting customer data beyond legal requirements can reduce...
Fresh off a series of recent attacks targeting major retail companies in the United States and the UK, the notorious Scattered Spider cybercrime group is now targeting insurance companies, and earlier this month apparently bagged a high-profile victim in Aflac. The intrusion in Aflac, which was det...