> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Hackers are exploiting an OS command injection vulnerability in SiteGuard WAF, allowing them to execute commands with elevated privileges. Additionally, a critical denial-of-service vulnerability has been identified in HAProxy, affecting its reliability as a load balancer. Meanwhile, the emergence of the Rust-based CikaBika bot is raising alarms as it leverages Discord for command execution and data theft. The job market is shifting, with a 26% drop in cybersecurity job postings amid rising demand for AI security engineers. Lastly, data breaches continue to pose risks, with the FFTir organization experiencing a significant data leak of sensitive information.
|
// AI-powered summary generated at 20:00
The fake human verification process led to infostealer and ransomware infections
The agency plans to renew a sweeping cybersecurity contract that includes expanded employee monitoring as the government escalates leak investigations and casts internal dissent as a threat.
This week, Joe laments on 2025, and what we can think of in 2026 in the wild world of cybersecurity.
'Within 10 minutes of gaining initial access, crypto miners were operational' Your AWS account could be quietly running someone else's cryptominer. Cryptocurrency thieves are using stolen Amazon account credentials to mine for coins at the expense of AWS customers, abusing their Elastic Container Se...
La Cour suprĂȘme autrichienne (OGH) a statuĂ© que Meta doit fournir Ă un utilisateur un accĂšs complet Ă l'ensemble de ses donnĂ©es personnelles, incluant les sources, destinataires et finalitĂ©s pour chaque information.Dans cette affaire initiĂ©e en 2014, la Cour a ordonnĂ© Ă Meta de communiquer l'intĂ©gra...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a développé un outil de démonstration pour analyser la traçabilité des modÚles d'intelligence artificielle publiés en source ouverte.Cet outil a pour objectif de faciliter l'exercice des droits d'accÚs, d'effacement ou d'opposition des...
La disponibilité de codes d'exploit entraßnera probablement une augmentation des attaques opportunistes.
L'Agence pour la protection des donnĂ©es personnelles (AZOP) a publiĂ© une dĂ©cision de sanction Ă l'encontre d'une banque, comprenant le prononcĂ© d'une amende de 1 500 000 âŹ, pour des manquements en lien avec la collecte de donnĂ©es via son application de banque mobile.Cette affaire dĂ©bute par une plai...
Resecurity reports a Q4 2025 surge in criminal use of DIG AI on Tor, enabling scalable illicit activity and posing new risks ahead of major 2026 events. During Q4 2025, Resecurity observed a notable increase in malicious actors utilizing DIG AI, accelerating during the Winter Holidays, when illegal...
Of the $3.4 billion in crypto stolen from January to December, Chainalysis attributed at least $2.02 billion to North Korean hackers.
The recent TruffleNet campaign, first documented by Fortinet, highlights a familiar and uncomfortable truth for security leaders: some of the most damaging cloud attacks arenât exploiting zero-day vulnerabilities. Theyâre exploiting identity models that were never designed for the scale and automati...
ByBit attack doing some seriously heavy lifting North Korea's yearly cryptocurrency thefts have accelerated, with Kim's state-backed cybercriminals plundering just over $2 billion worth of tokens in 2025.âŠ
Capable of creating ânearly perfectâ face swaps during live video chats, Hoatian has made millions, mainly via Telegram. But its main channel vanished after WIRED's inquiry into scammers using the app.
A warning for WhatsApp users: cybercriminals have discovered an alarmingly simple way to access a userâs conversations in real time by manipulating the appâs device pairing or linking routine.
Termed âGhostPairingâ by researchers at security company Gen Digital (owner of No...
A previously undocumented China-aligned threat cluster dubbed LongNosedGoblin has been attributed to a series of cyber attacks targeting governmental entities in Southeast Asia and Japan.
The end goal of these attacks is cyber espionage, Slovak cybersecurity company ESET said in a report published t...
An automated campaign is targeting multiple VPN platforms, with credential-based attacks being observed on Palo Alto Networks GlobalProtect and Cisco SSL VPN. [...]
 The commission is asking whether nonconsensual deepfake porn should be classified under U.S. law as harassment, blackmail or sending obscene material to minors.
The post U.S. Sentencing Commission seeks input on criminal penalties for deepfakes appeared first on CyberScoop.
Enter the 2025 Proton Lifetime Account Charity Fundraiser to support privacy and free speech. Win access to every Proton product, forever.
For platform engineering and DevOps leaders, implementing and scaling an Internal Developer Platform (IDP) has become both a top priority and a major source of risk. This guide is for teams building IDPs on Kubernetes and public cloud, outlining common implementation pitfalls, how to avoid the...