> TODAY'S SUMMARY (9 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The CikaBika Bot, a Rust-based malware, is exploiting Discord to control infected Windows systems, enabling command execution and data theft. In the job market, cybersecurity postings in the US have dropped by 26%, while demand for AI security engineers is surging, indicating a shift in hiring priorities. Meanwhile, a data breach at FFTir has resulted in the sale of 40 GB of sensitive information, including athletes' medical certificates. Additionally, ConnectWise has suspended its cloud backup services after attackers compromised Microsoft 365 tenants. Lastly, concerns over data security are further emphasized by a breach affecting 117,574 accounts at Gîtes de France.
|
// AI-powered summary generated at 12:01
Session 6B: Confidential Computing 1
Authors, Creators & Presenters: Maryam Rostamipoor (Stony Brook University), Seyedhamed Ghavamnia (University of Connecticut), Michalis Polychronakis (Stony Brook University)
PAPER
LeakLess: Selective Data Protection against Memory Leakage Attacks for Server...
Frankfurt, Dec. 16, 2025, CyberNewswire — Link11, a European provider of web infrastructure security solutions, has released new insights outlining five key cybersecurity developments expected to influence how organizations across Europe prepare for and respond to threats in 2026.… (more…)
The post...
House Homeland Security Chairman Andrew Garbarino, R-N.Y., also discussed Salt Typhoon, regulations and the cyber workforce Tuesday.
The post Key lawmaker says Congress likely to kick can down road on cyber information sharing law appeared first on CyberScoop.
After our research on Cursor, in the context of developer-ecosystem security, we turn our attention to the Jupyter ecosystem. We expose security risks we identified in the notebook’s export functionality, in the default Windows environment, to help organizations better protect their assets and netwo...
PDVSA published a statement on Monday that confirmed the attack but claimed the company has still been able to operate.
IntroductionIn early September 2025, Zscaler ThreatLabz discovered a new spear phishing campaign attributed to BlindEagle, a threat actor who operates in South America and targets users in Spanish-speaking countries, such as Colombia. In this campaign, BlindEagle targeted a government agency under t...
Veza has added a platform to its portfolio that is specifically designed to secure and govern artificial intelligence (AI) agents that might soon be strewn across the enterprise. Currently in the process of being acquired by ServiceNow, the platform is based on an Access Graph the company previousl...
Several security issues were fixed in the Linux kernel.
All I want for Christmas … is all of your data A new, modular infostealer called SantaStealer, advertised on Telegram with a basic tier priced at $175 per month, promises to make criminals' Christmas dreams come true. It boasts that it can run "fully undetected" even on systems with the "strictest A...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de RECICLAJES LOGROÑO, S.L. (comprenant le prononcé d'une amende de 10 000 €) pour des manquements en lien avec la collecte de copies de documents d'identité et l'information des personnes...
L'Agence Espagnole de Protection des Données a aujourd'hui publié une décision de sanction à l'encontre de OAC LOGÍSTICA, S.L. (comprenant le prononcé d'une amende de 1 200 €) pour des manquements en lien avec la collecte de données de candidats et la confidentialité des communications.Cette affaire...
Zero Trust has become the strategic anchor for modern cybersecurity. Every board is asking for it, every vendor claims to support it, and every CISO is under pressure to make...
The post The Future of Network Security Policy Management in a Zero Trust World appeared first on Security Boulevard.
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de PROCONO SA,, pour des manquements en lien avec la sécurité des données personnelles.Cette affaire débute par plusieurs réclamations déposées entre le 30 septembre et le 2 octobre 2023, signalant q...
After several disrupted months as House Homeland Security Committee chairman, Rep. Andrew Garbarino made time to discuss cyber issues such as an upcoming Trump administration strategy document and Chinese state-backed threats.
SecureIQLab has officially established its Asia-Pacific (APAC) office in Kathmandu, Nepal, marking a significant milestone in expanding independent cybersecurity validation and advisory services across the region. The new APAC office strengthens SecureIQLab’s ability to support regional enterprises...
Over the past week, enterprise security teams observed a combination of covert malware communication attempts and aggressive probing of publicly exposed infrastructure. These incidents, detected across firewall and endpoint security layers, demonstrate how modern cyber attackers operate simultaneous...
Several security issues were fixed in the Linux kernel.
From open source libraries to AI-powered coding assistants, speed-driven development is introducing new third-party risks that threat actors are increasingly exploiting.
The post From Open Source to OpenAI: The Evolution of Third-Party Risk appeared first on SecurityWeek.
The final EFFector of 2025 is here! Just in time to keep you up-to-date on the latests happenings in the fight for privacy and free speech online.
In this latest issue, we're sharing how to spot sneaky ALPR cameras at the U.S. border, covering a host of new resources on age verification laws, and ex...
Whether you’re generating data from scratch or transforming sensitive production data, performant test data generators are critical tools for achieving compliance in development workflows.
The post How test data generators support compliance and data privacy appeared first on Security Boulevard.