> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape highlights significant threats and vulnerabilities. Check Point has linked a suspected Chinese malware supplier to multiple hacking campaigns utilizing a shared malware framework. Meanwhile, critical flaws in Xen Orchestra have been exploited, allowing attackers to execute arbitrary code with admin privileges. Microsoft’s November Patch Tuesday addressed over 1,200 vulnerabilities, including a zero-day in Outlook that could leak NTLM hashes. Additionally, hackers are targeting Qlik Sense servers and exploiting vulnerabilities in Cisco BroadWorks and Openwave. Lastly, the rise of AI-enhanced impersonation fraud continues to pose challenges, with three arrests reported in connection to these schemes. Organizations are urged to prioritize patch management and enhance their security posture against evolving threats.
|
// AI-powered summary generated at 16:00
Amazon Web Services (AWS) recommends using AWS IAM Identity Center to provide your workforce access to AWS managed applications—such as Amazon Q Developer—and AWS accounts. Today, we announced IAM Identity Center support for IPv6. To learn more about the advantages of IPv6, visit the IPv6 product pa...
Session 10B: Ransomware
Authors, Creators & Presenters: Kevin van Liebergen (IMDEA Software Institute), Gibran Gomez (IMDEA Software Institute), Srdjan Matic (IMDEA Software Institute), Juan Caballero (IMDEA Software Institute)
PAPER
all your (data)base are belong to us: Characterizing Database...
Authentication determines who gets in and who stays out. Getting this right means fewer breaches, less downtime, and stronger trust with customers.
The post Top Authentication Methods for Preventing Data Breaches appeared first on Security Boulevard.
On Dec. 29 and 30, the Polish electricity grid was subjected to a cyberattack that nearly knocked out power to hundreds of thousands of households.
Security firm ESET has since conducted a closer examination of the attack and concluded that it was carried out by Sandworm, a...
A threat actor is seeding the internet with AI browser extensions that can intercept a user’s authenticated session tokens and hijack accounts.
The post Some ChatGPT browser extensions are stealing your data appeared first on CyberScoop.
What Is CVE-2026-21962? CVE-2026-21962 is a critical (CVSS 10.0) vulnerability in the Oracle HTTP Server and the WebLogic Server Proxy Plug-in for Apache HTTP Server and Microsoft IIS. An unauthenticated attacker with HTTP access can exploit this flaw by sending crafted requests to the affected prox...
Enables MSPs to enhance their security offerings with a simple, scalable microsegmentation solution. … Read More
The post 12Port Introduces Zero Trust Privileged Access Management (PAM) for Managed Service Providers appeared first on 12Port.
The post 12Port Introduces Zero Trust Privileged Access Ma...
Microsoft issued emergency updates to fix an actively exploited Office zero-day, CVE-2026-21509, affecting Office 2016–2024 and Microsoft 365 Apps. Microsoft released out-of-band security updates to address an actively exploited Office zero-day vulnerability tracked as CVE-2026-21509. The issue is a...
Supply chain breach in eScan antivirus distributes multi-stage malware via legitimate updates
Several security issues were fixed in Git LFS.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision à l'encontre de la Mairie de ***LOCALIDAD.1 pour des manquements liés à la publication de données personnelles dans le procès-verbal d'un conseil municipal. Cette affaire débute par une plainte signalant la lecture, lors d'un...
L'autorité polonaise de protection des données (UODO) a aujourd'hui publié une décision de sanction à l'encontre de la Poste Polonaise, comprenant le prononcé d'une amende de 978 000 PLN (environ 228 504 €), pour des manquements en lien avec l'indépendance de son délégué de la protection des données...
It’s no surprise that the most popular managed service is security. Cybersecurity threats are a daily occurrence and continue to get more sophisticated, with identity-based attacks now the primary vector. For example, 2023 saw a 72% increase in data breaches … Read More
The post Why MSPs Should Add...
L'Autorité suédoise de protection de la vie privée (IMY) a publié une décision de sanction à l'encontre de Sportadmin, comprenant le prononcé d'une amende de 6 000 000 de couronnes suédoises (environ 530 000 €), pour des manquements liés à la sécurité des données personnelles.Cette affaire débute pa...
It was discovered that GNU Screen incorrectly handled signals when setuid
or setgid privileges were being used, which is not the default in Ubuntu.
A local attacker could use this issue to send privileged signals, possibly
leading to a denial of service. This issue only affected Ubuntu 22.04 LTS.
(C...
L'Autorité de protection des données a publié une décision prononçant une réprimande à l'encontre d'une société pour des manquements relatifs à la sécurité des données personnelles suite à la perte de contrats. Cette affaire débute par une plainte déposée le 22 novembre 2024, signalant une réponse i...
L'autorité de protection des données italienne a aujourd'hui publié une décision de sanction à l'encontre de la commune de Nave (comprenant le prononcé d'une amende de 6 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance et de lecture automatisée des plaques d'i...
The Supreme Court said Monday that it will hear a case stemming from the use of a Facebook tracking pixel to monitor the streaming habits of the user of a sports website.
L'autorité italienne de protection des données (Garante) a publié une décision de sanction à l'encontre de la commune de Tuscania, comprenant le prononcé d'une amende de 12 000 €, pour des manquements liés à son système de vidéosurveillance, à la gestion des droits des personnes concernées et à un d...