> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are exploiting a command injection vulnerability in SiteGuard WAF, allowing them to execute commands as root or SYSTEM on compromised servers. In another development, the Rust-based CikaBika bot is turning Discord into a command center for executing malicious activities and stealing files from infected Windows systems. Meanwhile, two vulnerabilities in HAProxy have been identified that could lead to denial of service attacks. Data breaches continue to pose significant risks, with the FFTir organization reporting a 40 GB data leak including sensitive information. Additionally, the cybersecurity job market shows a 26% decline in postings, although demand for AI security engineers is rising, indicating a shift in the industry.
|
// AI-powered summary generated at 16:00
A series of actively exploited zero-day vulnerabilities affecting Windows, Google Chrome, and Apple platforms was disclosed in mid-December, according to The Hacker News, reinforcing a persistent reality for defenders: attackers no longer wait for exposure windows to close. They exploit them immedia...
French prosecutors probe a suspected cyberattack on GNV ferry Fantastic, raising concerns of a possible remote hijack. French prosecutors are investigating a suspected cyberattack on the GNV ferry Fantastic, raising fears of a potential remote hijack. The ferry Fantastic sails between Sète and North...
Build a digital backbone faster than adversaries can evolve or lose the information war NATO is in an existential race to develop sovereign cloud-based technologies to underpin its mission, the alliance's Assistant Secretary General for Cyber and Digital Transformation told an audience at the Royal...
The threat actor linked to Operation ForumTroll has been attributed to a fresh set of phishing attacks targeting individuals within Russia, according to Kaspersky.
The Russian cybersecurity vendor said it detected the new activity in October 2025. The origins of the threat actor are presently unknow...
Réunion du 16 décembre : Sarah El Haïry exige des marketplaces des mesures durables contre la pédocriminalité en ligne....
Information published.
Information published.
Attackers are exploiting a recently revealed vulnerability (CVE-2025-59718) to bypass authentication on Fortinet’s FortiGate firewalls, and are leveraging the achieved access to export their system configuration files, Arctic Wolf researchers warned on Tuesday. Configuration files can expose informa...
Research by: Sven Rath (@eversinc33), JaromĂr HoĹ™ejšà (@JaromirHorejsi) Key Points Introduction In a previous publication, we examined the YouTube Ghost Network, a coordinated collection of compromised accounts that abuse the platform to promote malware. In our current research, we analyze one speci...
The end of year holiday season may be a time of celebration, but for fraudsters, it’s open season. Cybercriminals take…
The post Follow the Fraud: How to Protect Your Customers this Holiday Season appeared first on Chainalysis.
ISACA has been appointed by the US DoD as the global credentialing authority for its CMMC program
ESET Security for Microsoft SharePoint Server version 12.1.15005.0 has been released and is available to download.
Passwords and app-based MFA add hidden costs through lost productivity, frequent resets, and risk of phishing and social engineering attacks. Token explains how wireless biometric, passwordless authentication eliminates credential-based attacks and delivers measurable financial returns by reducing l...
The Monetary Authority of Singapore’s cloud advisory, part of its 2021 Technology Risk Management Guidelines, advises financial institutions to move beyond siloed monitoring to adopt a continuous, enterprise-wide approach. These firms must undergo annual audits. Here’s how Tenable can help.
Key tak...
Folder permission changes cause queue failures and misleading error messages, no real fix yet Microsoft has good news for administrators: while some organizations now pay for security updates on older Windows versions, the inconsistent quality remains free.…
ESET PROTECT On-Prem hotfix version 13.0.10.0 has been released and is available to download.
The trucking industry group has released its 2026 Transportation Industry Cybersecurity Trends Report.
The post NMFTA Warns of Surge and Sophistication of Cyber-Enabled Cargo Theft appeared first on SecurityWeek.
A “purchase order” PDF blocked by Malwarebytes led to a credential-harvesting phishing site. So we analyzed the attack and where the data went next.
Passware Kit 2026 v1 introduces faster BitLocker decryption on AMD Zen systems, plus GPU acceleration and smarter password recovery.