> TODAY'S SUMMARY (9 articles)
Today's cybersecurity landscape highlights several critical threats and trends. The CikaBika Bot, a Rust-based malware, is exploiting Discord to control infected Windows systems, enabling command execution and data theft. In the job market, cybersecurity postings in the US have dropped by 26%, while demand for AI security engineers is surging, indicating a shift in hiring priorities. Meanwhile, a data breach at FFTir has resulted in the sale of 40 GB of sensitive information, including athletes' medical certificates. Additionally, ConnectWise has suspended its cloud backup services after attackers compromised Microsoft 365 tenants. Lastly, concerns over data security are further emphasized by a breach affecting 117,574 accounts at Gîtes de France.
|
// AI-powered summary generated at 12:01
With over $2.17 billion stolen from cryptocurrency services in the first half of 2025, protecting decentralized finance and web3 protocols…
The post Chainalysis Launches Hexagate Security for Blockchain Foundations and Ecosystem Developers appeared first on Chainalysis.
The Texas Attorney General sued five major television manufacturers, accusing them of illegally collecting their users' data by secretly recording what they watch using Automated Content Recognition (ACR) technology. [...]
La Commission Nationale de l'Informatique et des Libertés (CNIL) a lancé l'application mobile FantomApp, destinée aux 10-15 ans pour les aider à protéger leurs données personnelles sur les réseaux sociaux.Développée en collaboration avec des collégiens, l'application propose des outils concrets pour...
L'Agence espagnole de protection des données a publié une décision de sanction à l'encontre du collège Alonai, S.L., comprenant le prononcé d'une amende de 3 000 €, pour des manquements en lien avec son système de vidéosurveillance.Cette affaire débute par une plainte signalant l'installation de cam...
We compared three incidents that surfaced today to show why the impact of a breach depends less on who was hit and more on what was taken.
The surge in AI-driven traffic is transforming how websites manage their content. With AI bots and agents visiting sites at unprecedented rates (often scraping without permission, payment, or attribution) content owners face a critical challenge: how to protect their intellectual property while capi...
Identity systems hold modern life together, yet we barely notice them until they fail. Every time someone starts a new job, crosses a border, or walks into a secure building, an official must answer one deceptively simple question: Is this person really who they claim to be? That single moment—matc...
The browser extension Urban VPN Proxy has been reportedly collecting users’ AI chat conversations
Given the facts about the importance of Artificial Intelligence, for several months, I have been delving into this topic, but with caution, seeking to understand the key point of how we can protect applications based on Gen AI.
We are living in times when AI has been the ce...
An ongoing campaign has been observed targeting Amazon Web Services (AWS) customers using compromised Identity and Access Management (IAM) credentials to enable cryptocurrency mining.
The activity, first detected by Amazon's GuardDuty managed threat detection service and its automated security monit...
new phishing scam is exploiting Telegram’s built-in Mini Apps: fraudsters are running fake giveaways to steal accounts. Here’s how to protect yourself.
As of December 16, 2025, Meta uses your AI chats and other interactions for ad targeting. Here’s what it means and what you can do.
A flaw in JumpCloud Remote Assist for Windows has exposed managed endpoints to local privilege escalation and denial-of-service attacks
Session 6A: LLM Privacy and Usable Privacy
Authors, Creators & Presenters: Yuhao Wu (Washington University in St. Louis), Franziska Roesner (University of Washington), Tadayoshi Kohno (University of Washington), Ning Zhang (Washington University in St. Louis), Umar Iqbal (Washington University i...
Hackers are exploiting critical-severity vulnerabilities affecting multiple Fortinet products to get unauthorized access to admin accounts and steal system configuration files. [...]
Researchers said attackers linked to Russia’s military intelligence agency have moved from vulnerability exploits to focus on poorly configured network edge devices to keep its access to target networks.
The post Amazon warns that Russia’s Sandworm has shifted its tactics appeared first on CyberScoo...
The Scattered Lapsus$ Hunters hacking collective stole Pornhub premium users’ data, including email addresses and viewing history.
Threat actors are exploiting two critical Fortinet flaws, tracked as CVE-2025-59718 and CVE-2025-59719, days after patch release, impacting multiple Fortinet products. Threat actors started exploiting two critical flaws, tracked as CVE-2025-59718 and CVE-2025-59719 (CVSS score of 9.1), in Fortinet p...
Cybersecurity researchers have discovered a new malicious NuGet package that typosquats and impersonates the popular .NET tracing library and its author to sneak in a cryptocurrency wallet stealer.
The malicious package, named "Tracer.Fody.NLog," remained on the repository for nearly six years. It w...
In episode 81 of The AI Fix, Graham discovers that deepfakes are already marking your kids' homework, while Mark glimpses the future when he discovers AI agents that can communicate by reading each other's minds.
Also in this episode, a Chinese robot called Miro U proves six arms are better than...