> TODAY'S SUMMARY (2 articles)
Today's cybersecurity news highlights two significant vulnerabilities. A critical Broadcom Wi-Fi flaw, present since 2010, enables attackers to gain unauthorized control of routers within Wi-Fi range without needing a password. This vulnerability was brought to light by researcher Quentin Kaiser at Hexacon. Additionally, a newly discovered Linux KVM guest-host escape vulnerability, rated 9.3, poses a serious risk, potentially offering a new avenue for attacks on Linux-based systems. Both issues underscore the ongoing need for vigilance and timely patching in network and virtualization environments.
|
// AI-powered summary generated at 04:00
As the internet becomes an essential part of daily life, its environmental footprint continues to grow.Â
Data centers, constant connectivity, and resource-heavy browsing habits all contribute to energy consumption and digital waste. While individual users may not see this impact directly, the collec...
Trade-based money laundering hides illicit value in plain sight—SS8’s new whitepaper explores how data fusion and lawful intelligence can help investigators close the gaps and disrupt TBML before it embeds in the legitimate economy.
More than 115,000 internet-facing WatchGuard Firebox firewalls may be vulnerable to compromise via CVE-2025-14733, a remote code execution vulnerability actively targeted by attackers, Shadowserver’s latest scanning reveals. About CVE-2025-14733 WatchGuard Firebox firewalls, which also incorporate V...
Cybercriminals and state-sponsored hackers are increasingly exploiting Microsoft’s legitimate OAuth 2.0 device authorization process to hijack enterprise accounts, bypassing multifactor authentication protections and gaining persistent access to sensitive organizational data,...
DXS International, an official partner of NHS England, said the breach has not affected its operations
An ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the CVE documents a historic supply-chain attack in an End-of-Life (EoL) software product, not a new att...
An ASUS Live Update vulnerability tracked as CVE-2025-59374 has been making the rounds in infosec feeds, with some headlines implying recent or ongoing exploitation. A closer look, however, shows the CVE documents a historic supply-chain attack in an End-of-Life (EoL) software product, not a new att...
Resecurity has identified the emergence of uncensored darknet AI assistants, enabling threat actors to leverage advanced data processing capabilities for malicious purposes. One of these – DIG AI – was identified on September 29 of this year and has already gained popularity among cybercriminal and...
Artem Stryzhak pleaded guilty to conspiracy to commit computer fraud after he was extradited earlier this year.
The post Ukrainian Nefilim Ransomware Affiliate Pleads Guilty in US appeared first on SecurityWeek.
The traditional perimeter-based security model has become obsolete in today’s distributed digital environment. With 82% of organizations now operating in hybrid or multi-cloud infrastructures and remote work becoming the standard, the concept of a secure network boundary no longer exists. Zero Trust...
A Ukrainian man has pleaded guilty to charges connecting him to Nefilim ransomware attacks
Docker has made its open source Docker Hardened Images project available at no cost for every developer and organization. The catalog contains more than 1,000 container images built on open source distributions such as Debian and Alpine and is released under the Apache 2.0 license. The images are ac...
A comprehensive analysis and assessment of a critical severity vulnerability with low likelihood of mass exploitation
A Ukrainian national pleaded guilty on Friday to conducting Nefilim ransomware attacks that targeted high-revenue businesses across the United States and other countries. [...]
The critical-severity bug in the Fireware OS’s iked process leads to unauthenticated remote code execution.
The post WatchGuard Patches Firebox Zero-Day Exploited in the Wild appeared first on SecurityWeek.
Law enforcement agencies across 19 countries arrested 574 suspects and recovered approximately $3 million during a major cybercrime operation spanning Africa. Suspects were arrested in Ghana in connection to the cyber-fraud case, with over 100 digital devices seized. (Source: Europol) The month-long...
Fortra has uncovered a prolific BEC group dubbed “Scripted Sparrow” spanning three continents and at least five countries
Explore the 10 best MFA solutions in 2026. Compare features, pricing, pros, cons, and find the right multi-factor authentication tool for your business.
The post 10 Best Multi-Factor Authentication Solutions in 2026 appeared first on Security Boulevard.
Hackers stole personal data of about 27,500 people from the University of Sydney after accessing an online code library, the university confirmed. The University of Sydney disclosed a data breach in which threat actors accessed an online code library and stole personal information linked to about 27...
The British government is investigating a “cyber incident” following news reports that hackers linked to China have gained access to thousands of confidential documents.
The post UK Government Acknowledges It Is Investigating Cyber Incident After Media Reports appeared first on SecurityWeek.