> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights two significant vulnerabilities. A critical Broadcom Wi-Fi flaw, present since 2010, enables attackers to gain unauthorized control of routers within Wi-Fi range without needing a password. This vulnerability was brought to light by researcher Quentin Kaiser at Hexacon. Additionally, a newly discovered Linux KVM guest-host escape vulnerability, rated 9.3, poses a serious risk, potentially offering a new avenue for attacks on Linux-based systems. Both issues underscore the ongoing need for vigilance and timely patching in network and virtualization environments.
|
// AI-powered summary generated at 04:00
Physical data center maintenance is risky on a global network. We built a maintenance scheduler on Workers to safely plan disruptive operations, while solving scaling challenges by viewing the state of our infrastructure through a graph interface on top of multiple data sources and metrics pipelines...
The suspects are leaders and members of the Venezuelan crime syndicate Tren de Aragua.
The post 54 Charged in US Over ATM Attacks Involving ‘Ploutus’ Malware appeared first on SecurityWeek.
Users affected by the data breach may be contacted directly by cybercriminals, Pornhub warns.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Workstations and servers at Romania's water agency have been disrupted by a ransomware incident, but officials said critical infrastructure was still operating normally.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
A recent MacSync Stealer version no longer requires users to directly interact with the terminal for execution.
The post MacSync macOS Malware Distributed via Signed Swift Application appeared first on SecurityWeek.
Un développeur embauché par Amazon, mais qui opérait en réalité pour la Corée du Nord, a été démasqué grâce à la latence anormale de ses frappes au clavier.
Le post Comment Amazon a repéré un faux développeur grâce à un « lag » de 110 ms ? a été publié sur IT-Connect.
Pour Noël 2025, BLUETTI propose des remises sur ses stations de charge électrique et sur le tout nouveau modèle : l'Elite 100 V2 Bio-based. Voici les offres.
Le post Noël chez BLUETTI : jusqu’à 46% de réduction et lancement de la station Elite 100 V2 Bio-based a été publié sur IT-Connect.
For the latest discoveries in cyber research for the week of 22nd December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES An adult content platform PornHub has disclosed a data breach linked to analytics provider Mixpanel. The breach exposed more than 200 million records...
A recent upgrade to the RansomHouse ransomware operation has added new concerns for enterprise defenders, introducing a multi-layered encryption update to the group’s double-extortion RaaS model.
Also tracked under the cluster Jolly Scorpius, the ransomware gang has transit...
The cybersecurity startup will use the funds to accelerate platform improvements, global expansion, and partnerships.
The post Gambit Cyber Raises $3.4 Million in Seed Funding appeared first on SecurityWeek.
On-site staff keep key systems working while all but one region battles with encrypted PCs Romania's cybersecurity agency confirms a major ransomware attack on the country's water management administration has compromised around 1,000 systems, with work to remediate them still ongoing.…
Si and Desi close out the year on the Forensic Focus Podcast with a wide-ranging end-of-2025 wrap-up, reflecting on how the year unfolded for the show and the DFIR community.
Cyber threats last week showed how attackers no longer need big hacks to cause big damage. They’re going after the everyday tools we trust most — firewalls, browser add-ons, and even smart TVs — turning small cracks into serious breaches.
The real danger now isn’t just one major attack, but hundreds...
Researchers report renewed activity by Iran-linked Infy (Prince of Persia), showing the hacking group remains active and dangerous after years of silence. SafeBreach researchers have spotted renewed activity from the Iran-linked APT group Infy, also known as Prince of Persia, nearly five years after...
According to IBM’s 2025 Cost of a Data Breach report, breaches initiated with stolen credentials take an average of 246 days to identify and contain. That is more than eight months of undetected access. Eight months of reconnaissance. Eight months of quietly learning how your organization comm...
The cybersecurity landscape in 2026 presents unprecedented challenges for organizations across all industries. With cybercrime damages projected to exceed $10.5 trillion annually, enterprises face sophisticated threats from attackers leveraging AI-powered tools, advanced persistent threats, and mult...