> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape highlights significant threats and vulnerabilities. Check Point has linked a suspected Chinese malware supplier to multiple hacking campaigns utilizing a shared malware framework. Meanwhile, critical flaws in Xen Orchestra have been exploited, allowing attackers to execute arbitrary code with admin privileges. Microsoft’s November Patch Tuesday addressed over 1,200 vulnerabilities, including a zero-day in Outlook that could leak NTLM hashes. Additionally, hackers are targeting Qlik Sense servers and exploiting vulnerabilities in Cisco BroadWorks and Openwave. Lastly, the rise of AI-enhanced impersonation fraud continues to pose challenges, with three arrests reported in connection to these schemes. Organizations are urged to prioritize patch management and enhance their security posture against evolving threats.
|
// AI-powered summary generated at 16:00
Microsoft has released winapp, a new command line interface aimed at simplifying the process of building Windows applications. The open-source tool targets developers who rely on terminal based workflows and want a consistent way to create, configure, and manage Windows apps across projects. Bringin...
Here’s a look at the most interesting products from the past week, featuring releases from cside, Obsidian Security, Rubrik, SEON, and Vectra AI. cside targets hidden website privacy violations with Privacy Watch cside announced the launch of Privacy Watch. The platform prevents website privacy viol...
It was discovered that cJSON incorrectly handled parsing large numbers. An
attacker could possibly use this issue to cause a denial of service.
(CVE-2023-26819)
It was discovered that cJSON may perform out-of-bounds read when processing
specially crafted JSON files using parse_object. An attacker c...
Lesen Sie, worauf es bei der Zusammenarbeit zwischen Ihrem IT-Security- und Engineering-Team ankommt. Foto: Lipik Stock Media – shutterstock.comSecurity-Teams bestehen in erster Linie aus Mitarbeitern, die für den Betrieb und die Einhaltung von Vorschriften und Richtlinien zustä...
Twelve US companies hit by the INC ransomware group were able to recover encrypted data after a cybersecurity firm discovered the cloud storage infrastructure where the gang stockpiled what it stole.
Researchers at Florida-based Cyber Centaurs said Thursday they took advant...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
Une vulnérabilité a été découverte dans Broadcom Web Security Services Agent. Elle permet à un attaquant de provoquer une élévation de privilèges.
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
La Technische Universität (TU) Wien a subi une faille de sécurité dans son réseau informatique, entraînant la compromission de comptes et un accès potentiel à des données sensibles. Les systèmes informatiques de l'université sont actuellement limités et les employés ainsi que les étudiants doivent r...
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, une élévation de privilèges et un déni de service à distance.
Les universités allemandes, dont l’Université des sciences appliquées d’Emden/Leer, font face à des attaques quotidiennes contre leurs systèmes informatiques, ce qui rend la prévention et la détection précoce essentielles. Le 23/01/2026, une attaque potentielle a été détectée et bloquée à temps, san...
La société Romina Mineralbrunnen GmbH a été victime d'une cyberattaque, ce qui a entraîné une perte de connectivité pour les e-mails et le réseau téléphonique fixe. La société a mis en place une hotline pour les cas urgents et les ventes peuvent être contactées via les représentants de vente. Les au...
Teach a crook to phish… Criminals can more easily pull off social engineering scams and other forms of identity fraud thanks to custom voice-phishing kits being sold on dark web forums and messaging platforms.…
Navia Benefit Solutions, Inc. suffered a data breach where an unauthorized actor accessed and potentially acquired certain information between December 22, 2025, and January 15, 2026. The information that could have been impacted includes name, date of birth, Social Security number, phone number, an...
MIAMI, Jan. 22, 2026, CyberNewswire — Halo Security, a leading provider of external attack surface management and penetration testing services, today announced it has successfully achieved SOC 2 Type II compliance following an extensive multi-month audit by Insight Assurance.… (more…)
The post News...
Computers with Telnet open are in immediate danger of being compromised due to a critical vulnerability that allows attackers to bypass authentication.
The Telnet remote access protocol has long been superseded by the more secure and encrypted SSH, but many IoT and embedded...
The update for python-urllib3 announced in DSA 6102-1 introduced a regression in the patch meant to address CVE-2026-21441 for the oldstable distribution (bookworm). Updated packages are now available to correct this issue. For the oldstable distribution (bookworm), this problem has been fixed