> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Hackers are exploiting an OS command injection vulnerability in SiteGuard WAF, allowing them to execute commands with elevated privileges. Additionally, a critical denial-of-service vulnerability has been identified in HAProxy, affecting its reliability as a load balancer. Meanwhile, the emergence of the Rust-based CikaBika bot is raising alarms as it leverages Discord for command execution and data theft. The job market is shifting, with a 26% drop in cybersecurity job postings amid rising demand for AI security engineers. Lastly, data breaches continue to pose risks, with the FFTir organization experiencing a significant data leak of sensitive information.
|
// AI-powered summary generated at 20:00
Maximum-severity vuln lets unauthenticated attackers execute code on trusted infra management platform Hewlett Packard Enterprise has told customers to drop whatever they're doing and patch OneView after admitting a maximum-severity bug could let attackers run code on the management platform without...
The Danish intelligence service believes some pro-Russian hacktivist groups have links with the Kremlin
Pornhub est actuellement la cible d'une tentative d'extorsion orchestrée par le groupe de pirates ShinyHunters. Ils affirment détenir 94 Go de données.
Le post Une fuite de données Pornhub pourrait révéler l’historique des utilisateurs Premium a été publié sur IT-Connect.
Danish intelligence officials blamed Russia for orchestrating cyberattacks against Denmark's critical infrastructure, as part of Moscow's hybrid attacks against Western nations. [...]
At least some of this is coming to light:
Doublespeed, a startup backed by Andreessen Horowitz (a16z) that uses a phone farm to manage at least hundreds of AI-generated social media accounts and promote products has been hacked. The hack reveals what products the AI-generated accounts are promoting,...
I recently attended the AI Engineer Code Summit in New York, an invite-only gathering of AI leaders and engineers. One theme emerged repeatedly in conversations with attendees building with AI: the belief that we’re approaching a future where developers will never need to look at code again. When I...
Downloaded from a code library, the information pertains to current and former staff and affiliates, and to alumni and students.
The post University of Sydney Data Breach Affects 27,000 Individuals appeared first on SecurityWeek.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Linked to the Aisuru IoT botnet, Kimwolf was seen launching over 1.7 billion DDoS attack commands and increasing its C&C domain’s popularity.
The post ‘Kimwolf’ Android Botnet Ensnares 1.8 Million Devices appeared first on SecurityWeek.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
The Clop ransomware group is targeting Gladinet CentreStack file servers in a new large-scale extortion campaign. The Clop ransomware group is targeting Gladinet CentreStack file servers in a new large-scale extortion campaign aimed at stealing sensitive data from organizations worldwide. Gladinet C...
Security researchers have flagged a coordinated credential-based campaign targeting VPN authentication endpoints from Cisco and Palo Alto Networks.
Over just two days in mid-December, attackers launched large-scale automated login attempts against Cisco’s SSL VPN and Palo A...
WatchGuard has released fixes to address a critical security flaw in Fireware OS that it said has been exploited in real-world attacks.
Tracked as CVE-2025-14733 (CVSS score: 9.3), the vulnerability has been described as a case of out-of-bounds write affecting the iked process that could allow a rem...
The US has charged 54 individuals in a massive ATM jackpotting conspiracy linked to Venezuelan crime syndicate Tren de Aragua, accused of stealing millions
En cybersécurité, nous avons parfois pris la mauvaise habitude de confondre complexité et robustesse. Nous empilons les couches de sécurité, les outils, et les acronymes. Plus il y en a, mieux c’est ?...
Officials admit 'there certainly has been a hack,' but refuse to confirm China link or data theft The UK's Foreign Office is investigating a confirmed cyberattack it learned about in October, senior ministers say.…
Dec 19, 2025 - Jeremy Snyder - A recent posting by Dr. Chase Cunningham from Ericom Software on LinkedIn took an interesting view on web application firewalls, most commonly known as a WAF.
WAF’s Must Die Like the Password and VPN’s
Here at FireTail.io, we are also not fans of a WAF. Why? We do not...
Dec 19, 2025 - Jeremy Snyder - New beginnings, such as new years, provide a nice opportunity to look back at what we have just experienced, as well as look forward to what to expect. 2022 was a year of transition in many ways, and 2023 may well be the same. I wanted to reflect on some of those trans...