[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (15 articles)

|

// AI-powered summary generated at 16:00

> The Raspberry Pi wakeup call: Why enterprises must rethink physical security
A recent attack on a French ferry, in which an attacker reportedly plugged a tiny computer called a Raspberry Pi into the network in an attempt to break into the vessel’s operations, offers an important lesson for enterprise CISOs: one analyst estimated that half of all enterp...
> Der Raspberry-Pi-Weckruf für CISOs
Kleines Device, große Wirkung.Kiklas | shutterstock.com Mitte Dezember wurde eine Fähre in Besitz der Mediterranean Shipping Company über Stunden in einem französischen Hafen festgesetzt, wie Bloomberg berichtete. Der Grund: Es bestand der Verdacht, dass russische Cyberkrimi...
> What’s Powering Enterprise AI in 2025: ThreatLabz Report Sneak Peek
As 2025 comes to a close, artificial intelligence (AI) is a clear throughline across enterprise organizations. Many teams are still in the thick of implementing AI or deciding where and how to use it. Keeping up with usage trends and developments on top of that has become increasingly difficult. AI...
> Microsoft warns MSMQ may fail after update, breaking apps
A warning from Microsoft that a Windows patch issued last week may cause the Message Queuing (MSMQ) function in the operating system to malfunction could be behind multiple reports of internet of things (IoT) applications failing. David Shipley, head of Canadian security aw...
> ISC Stormcast For Thursday, December 18th, 2025 https://isc.sans.edu/podcastdetail/9744, (Thu, Dec 18th)
> Millions impacted by PornHub, SoundCloud data breaches
PornHub sent emails out to many users and published a statement warning that it was affected by a recent breach of data analytics service provider Mixpanel.
> The Botting Network - 96,320 breached accounts
In August 2012, the forum for making money with botting "The Botting Network" suffered a data breach that exposed 96k user records. The now defunct vBulletin forum leaked 96k email addresses, usernames, dates of birth and salted MD5 password hashes.
> LLM10: Unbounded Consumption – FireTail Blog
Dec 17, 2025 - Lina Romero - The OWASP Top 10 for LLMs was released this year to help security teams understand and mitigate the rising risks to LLMs. In previous blogs, we’ve explored risks 1-9, and today we’ll finally be deep diving LLM10: Unbounded Consumption. Unbounded Consumption occurs when L...
> CVE-2025-54567 hw/pci/pcie_sriov.c in QEMU through 10.0.3 mishandles the VF Enable bit write mask, a related issue to CVE-2024-26327.
Information published.
> CVE-2025-54566 hw/pci/pcie_sriov.c in QEMU through 10.0.3 has a migration state inconsistency, a related issue to CVE-2024-26327.
Information published.
> North Korea-Linked Hackers Steal $2.02 Billion in 2025, Leading Global Crypto Theft
Threat actors with ties to the Democratic People's Republic of Korea (DPRK or North Korea) have been instrumental in driving a surge in global cryptocurrency theft in 2025, accounting for at least $2.02 billion out of more than $3.4 billion stolen from January through early December. The figure repr...
> CVE-2024-28863 node-tar vulnerable to denial of service while parsing a tar file due to lack of folders count validation
Information published.
> CVE-2025-38375 virtio-net: ensure the received length does not exceed allocated size
Information published.
> Smashing Security podcast #448: The Kindle that got pwned
Think your Kindle is harmless? Think again! In this episode, we unpack a Black Hat Europe talk revealing how a boobytrapped audiobook could exploit the Amazon eBook reader - potentially letting an attacker break into your account and seize control of your credit card. Plus a blast from 2021's "su...
> CVE-2025-38363 drm/tegra: Fix a possible null pointer dereference
Information published.
> CVE-2025-38371 drm/v3d: Disable interrupts before resetting the GPU
Information published.
> Homomorphic Encryption for Privacy-Preserving MCP Analytics in a Post-Quantum World
Explore homomorphic encryption for privacy-preserving analytics in Model Context Protocol (MCP) deployments, addressing post-quantum security challenges. Learn how to secure your AI infrastructure with Gopher Security. The post Homomorphic Encryption for Privacy-Preserving MCP Analytics in a Post-Qu...
> CVE-2025-38350 net/sched: Always pass notifications when child class becomes empty
Information published.
> CVE-2025-38097 espintcp: remove encap socket caching to avoid reference leak
Information published.
> ‘Ink Dragon’ threat group targets IIS servers to build stealthy global network
A Chinese-linked threat group identified as “Ink Dragon” is targeting common weaknesses in Internet Information Services (IIS) servers to build a global espionage network that is difficult to track or disrupt, security vendor Check Point has reported. Also nicknamed “Earth...