> TODAY'S SUMMARY (9 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The CikaBika Bot, a Rust-based malware, is exploiting Discord to control infected Windows systems, enabling command execution and data theft. In the job market, cybersecurity postings in the US have dropped by 26%, while demand for AI security engineers is surging, indicating a shift in hiring priorities. Meanwhile, a data breach at FFTir has resulted in the sale of 40 GB of sensitive information, including athletes' medical certificates. Additionally, ConnectWise has suspended its cloud backup services after attackers compromised Microsoft 365 tenants. Lastly, concerns over data security are further emphasized by a breach affecting 117,574 accounts at Gîtes de France.
|
// AI-powered summary generated at 12:01
Hadrian launched the latest iteration of its offensive Agentic AI Platform, designed to take an offensive approach to find external exposures and test them for exploitability. Instead of waiting for attacks to happen, Hadrian’s AI agents act like hackers themselves, probing, testing, and exploiting...
U.S. CISA adds a vulnerability impacting multiple products to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Fortinet Multiple Products Improper Verification of Cryptographic Signature Vulnerability, tracked as CVE-2025-59718 (CVSS...
A new campaign named GhostPoster has leveraged logo files associated with 17 Mozilla Firefox browser add-ons to embed malicious JavaScript code designed to hijack affiliate links, inject tracking code, and commit click and ad fraud.
The extensions have been collectively downloaded over 50,000 times,...
Vectra AI redefines hybrid attack resilience across the full attack lifecycle by unifying controls pre-and-post compromise within the Vectra AI Platform. Vectra AI’s control philosophy empowers defenders with continuous control through proactive threat exposure management, 360 degree response, and p...
Added an acknowledgement. This is an informational change only.
Added an acknowledgement. This is an informational change only.
As Artificial Intelligence technology rapidly advances, Large Language Models (LLMs) are being widely adopted across countless domains. However, with this growth comes a critical challenge: LLM security issues are becoming increasingly prominent, posing a major constraint on further development. Gov...
Added an acknowledgement. This is an informational change only.
The startup takes an agentic approach to preventing vulnerability exploitation by uncovering exposure across assets.
The post Dux Emerges From Stealth Mode With $9 Million in Funding appeared first on SecurityWeek.
Security teams keep sending vulnerability notifications, and the same pattern keeps repeating. Many alerts land, few lead to fixes. A new qualitative study digs into what happens after those reports arrive and explains why remediation so often stops short. The research comes from the Center for Info...
Cloud access security brokers (CASBs) explained
As the name suggests, a cloud access security broker (CASB) manages access between enterprise endpoints and cloud resources from a security perspective. CASBs can be deployed on-premises or in the cloud; as a hardware applianc...
A US Securities and Exchange Commission committee has recommended a new rule that would mandate companies to analyze and report all AI efforts — including decisions to not use AI for some purposes.
Attorneys who have studied the proposal note that the AI rule — just like t...
For a long time, DDoS attacks were easy to recognize. They were loud, messy, and built on raw throughput. Attackers controlled massive botnets and flooded targets until bandwidth or infrastructure collapsed. It was mostly a scale problem, not an engineering one. That era is ending. A quieter and far...
※この記事は自動翻訳されています。正確な内容につきましては原文をご参照ください。 このたび、Chainalysis のソリューションが AWS Marketplace にて提供開始となりましたので、お知らせいたします。AWS Marketplace は、Amazon Web Services（AWS）上で稼働するパートナー企業各社が提供するソフトウェア製品が多数掲載...
Criminals are moving money across borders faster, and financial institutions are feeling the squeeze. Compliance teams feel this strain every day as they try to keep up with schemes that shift through accounts, intermediaries, and digital channels. A new academic review of regulatory technology, or...
Les failles découvertes dans FortiCloud SSO (CVE-2025-59718 et CVE-2025-59719) sont exploitées par des pirates pour compromettre les appareils Fortinet.
Le post Les failles dans FortiCloud SSO désormais exploitées pour pirater les équipements Fortinet ! a été publié sur IT-Connect.
Zabbix is an open source monitoring platform designed to track the availability, performance, and integrity of IT environments. It monitors networks along with servers, virtual machines, applications, services, databases, websites, and cloud resources. For cybersecurity professionals, this visibilit...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Edge. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The followi...
This vulnerability allows remote attackers to create a denial-of-service condition on affected installations of Sante PACS Server. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.5. The following CVEs are assigned: CVE-2025-14501.