> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are exploiting a command injection vulnerability in SiteGuard WAF, allowing them to execute commands as root or SYSTEM on compromised servers. In another development, the Rust-based CikaBika bot is turning Discord into a command center for executing malicious activities and stealing files from infected Windows systems. Meanwhile, two vulnerabilities in HAProxy have been identified that could lead to denial of service attacks. Data breaches continue to pose significant risks, with the FFTir organization reporting a 40 GB data leak including sensitive information. Additionally, the cybersecurity job market shows a 26% decline in postings, although demand for AI security engineers is rising, indicating a shift in the industry.
|
// AI-powered summary generated at 16:00
Le ministre de l'Intérieur Laurent Nuñez a confirmé que les pirates avaient eu accès à des fichiers importants, notamment au sujet des antécédents judiciaires.
Le post Cyberattaque ministère de l’Intérieur : les pirates ont bien eu accès à des fichiers importants a été publié sur IT-Connect.
As holiday lights go up and inboxes fill with year-in-review emails, it’s tempting to look back on 2025 as “the year of AI.”
But for security teams, it was something more specific – the year APIs, AI agents, and MCP servers collided across the API fabric, expanding the attack surface faster than mos...
France's Interior Ministry said it is investigating the “reality and scope” of a post on a cybercrime forum by a user claiming to have hacked the institution.
A first-person journey from undetected fraud to defending trust—how life events, neurodiversity, and hard-won insight shaped a former fraudster into a fraud fighter.
The post Hacker Conversations: Alex Hall, One-time Fraudster appeared first on SecurityWeek.
The malware provides full device control and real-time surveillance capabilities like those of advanced spyware.
The post New $150 Cellik RAT Grants Android Control, Trojanizes Google Play Apps appeared first on SecurityWeek.
Microsoft has asked businesses to reach out for advice on how to temporarily mitigate a Message Queuing (MSMQ) issue causing enterprise apps and Internet Information Services (IIS) sites to fail. [...]
Introduction Let’s be honest — passwords are a pain. They’re either too simple and easy to guess, or so complicated […]
The post How Passkeys Work (Explained Simply) appeared first on Security Boulevard.
Askul disclosed that an October RansomHouse ransomware attack compromised over 700,000 records at the Japanese e-commerce and logistics firm. Askul is a Japanese e-commerce and logistics company best known for supplying office products, stationery, IT equipment, and everyday business consumables to...
Raise your hand if you’ve fallen victim to a vendor-led conversation around their latest AI-driven platform over the past calendar year. Keep it up if the pitch leaned on “next-gen,” “market-shaping,” or “best-in-class” while they nudged another product into your stack. If your hand is still u...
Firefox 146, disponible depuis le 9 décembre 2025, apporte la sauvegarde locale chiffrée sur Windows et cette version corrige aussi 13 failles de sécurité.
Le post Firefox 146 apporte la sauvegarde locale chiffrée sur Windows et corrige 13 failles de sécurité a été publié sur IT-Connect.
For two days in September, Afghanistan had no internet. No satellite failed; no cable was cut. This was a deliberate outage, mandated by the Taliban government. It followed a more localized shutdown two weeks prior, reportedly instituted “to prevent immoral activities.” No additional explanation was...
Cybersecurity has always evolved in response to attacker innovation, but the pace of change over the last few years has been unprecedented—particularly with the emergence of weaponized AI to scale phishing, deepfakes, and voice cloning. As we head toward 2026, several structural shifts are becoming...
SoundCloud Confirms Data Breach After Hackers Exfiltrate User Account Data SoundCloud disclosed that threat actors accessed an ancillary service dashboard and exfiltrated email addresses and profile information for roughly 20 percent of its users. The company says no passwords or financial data were...
JumpCloud’s Remote Assist for Windows agent contained a critical local privilege escalation flaw, allowing full system compromise.
Disclosed by XM Cyber, the vulnerability stems from insecure file operations during uninstall or update flows that execute with Windows NT AUTH...
Modern security teams often feel like they’re driving through fog with failing headlights. Threats accelerate, alerts multiply, and SOCs struggle to understand which dangers matter right now for their business. Breaking out of reactive defense is no longer optional. It’s the difference between preve...
Amazon disclosed a years-long Russian state-backed cyber campaign targeting Western critical infrastructure from 2021 to 2025. Amazon Threat Intelligence reports a long-running Russian state-backed campaign (2021–2025) targeting Western critical infrastructure. Threat actors shifted from exploiting...
Led by Bain Capital Ventures, the investment round brings the total raised by the company to $146.5 million.
The post Adaptive Security Raises $81 Million in Series B Funding appeared first on SecurityWeek.
The threat actor known as Jewelbug has been increasingly focusing on government targets in Europe since July 2025, even as it continues to attack entities located in Southeast Asia and South America.
Check Point Research is tracking the cluster under the name Ink Dragon. It's also referenced by the...
Eine russische Cyberspionage-Kampagne zielt auf Energieversorger. Evgeny_V – shutterstock.com
Das Team von Amazon Threat Intelligence stellte fest, dass eine vom russischen Staat geförderte Cyberspionagegruppe vermehrt Energieunternehmen und Anbieter kritischer Infrastruktur...
Dans ce tutoriel, nous allons apprendre à créer notre première fonction en Bash sous Linux, avec des exemples et l'utilisation de paramètres et valeurs.
Le post Maitriser les fonctions en Bash a été publié sur IT-Connect.