> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Hackers are exploiting an OS command injection vulnerability in SiteGuard WAF, allowing them to execute commands with elevated privileges. Additionally, a critical denial-of-service vulnerability has been identified in HAProxy, affecting its reliability as a load balancer. Meanwhile, the emergence of the Rust-based CikaBika bot is raising alarms as it leverages Discord for command execution and data theft. The job market is shifting, with a 26% drop in cybersecurity job postings amid rising demand for AI security engineers. Lastly, data breaches continue to pose risks, with the FFTir organization experiencing a significant data leak of sensitive information.
|
// AI-powered summary generated at 20:00
Around 2,000 GP practices use its products An NHS tech supplier is investigating a cyberattack that affected its systems in the early hours of Sunday.…
Chainalysis warns North Korea continues to steal billions in crypto for its weapons program
TL;DR North Korean hackers stole $2.02 billion in cryptocurrency in 2025, a 51% year-over-year increase, pushing their all-time total to…
The post North Korea Drives Record $2 Billion Crypto Theft Year, Pushing All-Time Total to $6.75 Billion appeared first on Chainalysis.
The Paris Prosecutor’s Office said a person had been arrested on charges “including an attack on an automated personal data processing system operated by the State, as part of an organized group.”
A self-harm prevention kit is becoming an essential part of school safety planning as student mental health challenges continue to rise across the United States. Schools are increasingly responsible for supporting the emotional well-being of their students and creating safe environments that reduce...
A new variant of the BeaverTail malware linked to North Korean hackers has been identified targeting cryptocurrency traders and developers
Human-in-the-loop (HITL) safeguards that AI agents rely on can be subverted, allowing attackers to weaponize them to run malicious code, new research from CheckMarx shows.
HITL dialogs are a safety backstop (a final “are you sure?”) that the agents run before executing sens...
Security boffins warn flaw is now being used for ransomware attacks against live networks Microsoft says attackers have already compromised "several hundred machines across a diverse set of organizations" via the React2Shell flaw, using the access to execute code, deploy malware, and, in some cases,...
Hewlett Packard Enterprise (HPE) has patched a maximum-severity vulnerability in its HPE OneView software that enables attackers to execute arbitrary code remotely. [...]
Within the past year, artificial intelligence copilots and agents have quietly permeated the SaaS applications businesses use every day. Tools like Zoom, Slack, Microsoft 365, Salesforce, and ServiceNow now come with built-in AI assistants or agent-like features. Virtually every major SaaS vendor ha...
Keith Lockhart from Oxygen Forensics joins the Forensic Focus Podcast to examine how remote digital evidence collection is changing investigative workflows across DFIR, eDiscovery, and corporate investigations.
Threat actors stole names, Social Security numbers, and financial and health information, and deployed ransomware on RBHA’s systems.
The post 113,000 Impacted by Data Breach at Virginia Mental Health Authority appeared first on SecurityWeek.
Miggo Security has released a new report that examines how web application firewalls are used across real-world security programs. The research outlines the role WAFs play as foundational infrastructure and evaluates their effectiveness against critical vulnerabilities, CVEs, and AI-driven threats....
Resiliency has been top of mind in 2025, and recent high-profile CVEs serve as holiday reminders that adversaries aren't slowing down. But what changed this year was how the federal community responded. Increasingly, exploitability drove the clock: when vulnerabilities surfaced as actively exp...
Cisco has warned that a China-linked hacking group is actively exploiting a previously unknown vulnerability in its Secure Email appliances to gain persistent access, forcing affected organizations to consider disruptive rebuilds of critical security infrastructure while patch...
The Italian company has raised nearly $200 million in 2025 for its widely used embedded cybersecurity platform.
The post IoT Security Firm Exein Raises €100 Million appeared first on SecurityWeek.
What is SSL/TLS? SSL and TLS are protocols used on the transport layer, which is used to provide a secure connection between two nodes in a computer network. The first widely used protocol that was aimed to secure the Internet connections was SSL, which was created by Netscape in mid 1995. It uses b...
The Biggest Cyber Stories of the Year: What 2025 Taught Us
madhav
Thu, 12/18/2025 - 10:30
2025 didn’t just test cybersecurity; it redefined it.
From supply chains and healthcare networks to manufacturing floors and data centers, the digital world was reminded of a simple truth: everything is conne...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple and Gladinet CentreStack and Triofox flaws to its Known Exploited Vulnerabil...
France’s counterespionage agency is investigating a suspected cyberattack plot targeting an international passenger ferry
The post France Probes ‘Foreign Interference’ After Remote Control Malware Found on Passenger Ferry appeared first on SecurityWeek.