> TODAY'S SUMMARY (9 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The CikaBika Bot, a Rust-based malware, is exploiting Discord to control infected Windows systems, enabling command execution and data theft. In the job market, cybersecurity postings in the US have dropped by 26%, while demand for AI security engineers is surging, indicating a shift in hiring priorities. Meanwhile, a data breach at FFTir has resulted in the sale of 40 GB of sensitive information, including athletes' medical certificates. Additionally, ConnectWise has suspended its cloud backup services after attackers compromised Microsoft 365 tenants. Lastly, concerns over data security are further emphasized by a breach affecting 117,574 accounts at Gîtes de France.
|
// AI-powered summary generated at 12:01
Misconfigured servers are in, 0-days out Chinese espionage crew Ink Dragon has expanded its snooping activities into European government networks, using compromised servers to create illicit relay nodes for future operations.…
A new Android malware-as-a-service (MaaS) named Cellik is being advertised on underground cybercrime forums offering a robust set of capabilities that include the option to embed it in any app available on the Google Play Store. [...]
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.Perhaps it's just the time of year where we all start to wind down a bit, or maybe I'm just tired after another massive 12 months, but this week's vid is way late. Ok, going away to the p...
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
The curl project moved over its source code hosting to GitHub in March 2010, but we kept the main bug tracker running like before – on Sourceforge. It took us a few years, but in 2015 we finally ditched the Sourceforge version fully. We adopted and switched over to the pull request model and we … Co...
A new campaign dubbed 'GhostPoster' is hiding JavaScript code in the image logo of malicious Firefox extensions counting more than 50,000 downloads, to monitor browser activity and plant a backdoor. [...]
Amazon GuardDuty and our automated security monitoring systems identified an ongoing cryptocurrency (crypto) mining campaign beginning on November 2, 2025. The operation uses compromised AWS Identity and Access Management (IAM) credentials to target Amazon Elastic Container Service (Amazon ECS) and...
Researchers with Google Threat Intelligence Group have detected five China-nexus threat groups exploiting the maximum-security React2Shell security flaw to drop a number of malicious payloads, from backdoors to downloaders to tunnelers.
The post Google Finds Five China-Nexus Groups Exploiting React...
Why Are Non-Human Identities Vital in Identity and Access Management? In what ways do Non-Human Identities (NHIs) enhance identity and access management (IAM)? Where organizations expand their digital footprints, the management of NHIs becomes a strategic imperative for achieving robust cybersecurit...
In a press briefing this week, Amazon officials said the years-long campaign “represents a significant evolution in critical infrastructure targeting."
How Secure Are Your Non-Human Identities in Cloud-Native Environments? How often do we consider the security gaps introduced by non-human identities (NHIs)? While much focus is placed on human identity protection, the oversight of NHIs—machine identities that interact with systems and data—is just a...
Are Your Non-Human Identities (NHIs) and Secrets Truly Secure? Understanding the Importance of Securing Non-Human Identities Have you ever wondered how secure your organization’s machine identities are? Managing Non-Human Identities (NHIs) along with their secrets is crucial to fortifying your cyber...
An employee of the adult site could be responsible. Analytics vendor Mixpanel says it is not the source of data stolen from Pornhub and says the info was last accessed by an employee of the adult site.…
The post Outgoing GAO chief warns of ‘taking our foot off the gas’ at CISA appeared first on CyberScoop.
Ambiguity isn't just a challenge. It's a leadership test - and most fail it.
I want to start with something that feels true but gets ignored way too often.
Most of us in leadership roles have a love hate relationship with ambiguity. We say we embrace it... until it shows up for real. Then we freeze,...
More than 8 million people have installed extensions that eavesdrop on chatbot interactions Ad blockers and VPNs are supposed to protect your privacy, but four popular browser extensions have been doing just the opposite. According to research from Koi Security, these pernicious plug-ins have been h...
Several security issues were fixed in the Linux kernel.
Jean-Claude Graf, Sandro Rüegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
The Google Dark Web Report tool is shutting down on February 17, 2026. Here's how you can still get alerted to personal data leaks.
The Amazon Threat Intelligence team has disrupted active operations attributed to hackers working for the Russian foreign military intelligence agency, the GRU, who targeted customers' cloud infrastructure. [...]