> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
TL;DR Crypto-enabled fraud cost victims at least $14 billion globally in 2025, with sophisticated scams like pig butchering and AI-poweredâŠ
The post Why Now is the Time for the UK to Lead the Global Fight against Crypto-enabled Fraud appeared first on Chainalysis.
Several security issues were fixed in libxml2.
Depuis le 15 janvier 2026, une vague d'attaques automatisées a été observée : des firewalls Fortinet sont piratés et les configurations FortiGate volées.
Le post FortiCloud SSO : des firewalls Fortinet piratés, des configurations volées ! a été publié sur IT-Connect.
Miami, Florida, 22nd January 2026, CyberNewsWire
The post Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time appeared first on Security Boulevard.
Cybersecurity researchers have disclosed details of a new ransomware family called Osiris that targeted a major food service franchisee operator in Southeast Asia in November 2025.
The attack leveraged a malicious driver called POORTRY as part of a known technique referred to as bring your own vulne...
The alleged risks of being publicly identified have not stopped DHSÂ and ICE employees from creating profiles on LinkedIn, even as Kristi Noem threatens to treat revealing agents' identities as a crime.
The incidents occurred amid Gaza protests and suggest human rights violations, Citizen Lab said.
The post Researchers find Jordan government used Cellebrite phone-cracking tech against activists appeared first on CyberScoop.
Britainâs House of Lords voted by an overwhelming margin to ban children under age 16 from accessing social media, setting up a vote on the law in the House of Commons.
Tutoriel Scanopy : apprenez à installer ce scanner réseau via Docker afin de générer une topologie de vos actifs (serveurs, firewalls...) en quelques minutes.
Le post Installation de Scanopy : cet outil open source génÚre les diagrammes réseau à votre place a été publié sur IT-Connect.
Discover how Ford, Icertis, and TriNet modernized security with Microsoftâembedding Zero Trust, automating defenses, and enabling secure AI innovation at scale.
The post Microsoft Security success stories: Why integrated security is the foundation of AI transformation appeared first on Microsoft Sec...
The Irish government announced that it wants to pass a law that would grant police more surveillance powers, such as using spyware to fight serious crime, while aiming to protect the privacy rights of its citizens.
Obsidian Security today announced that it has extended the reach of its platform for protecting software-as-a-service (SaaS) applications to include any integrations. Additionally, the company is now making it possible to limit which specific end users of a SaaS application are allowed to grant and...
To all those who are fighting the good fight in the world of cyber, keep collaborating to ensure our world never succumbs to the chaos of the Upside Down.
The post The Upside Down is Real: What Stranger Things Teaches Us About Modern Cybersecurity appeared first on SecurityWeek.
A critical security flaw has been disclosed in the GNU InetUtils telnet daemon (telnetd) that went unnoticed for nearly 11 years.
The vulnerability, tracked as CVE-2026-24061, is rated 9.8 out of 10.0 on the CVSS scoring system. It affects all versions of GNU InetUtils from version 1.9.3 up to and i...
Iâve seen this movie before. Thatâs why a recent LinkedIn post by Ilya Kabanov stopped me mid-doomscroll. Kabanov described how frontier AI companies are quietly but decisively shifting into cybersecurity. They are not joining as partners or tacking on features. They are stepping up as product make...
Microsoft will soon add new fraud protection features to Teams calls, warning users about external callers who attempt to impersonate trusted organizations in social engineering attacks. [...]
An operational security failure allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S. organizations. [...]
Admins say attackers are still getting in despite recent patches FortiGate firewalls are getting quietly reconfigured and stripped down by miscreants who've figured out how to sidestep SSO protections and grab sensitive settings right out of the box.âŠ
Critical vulnerability in Appsmith allows account takeover via flawed password reset process
Session 9D: Github + OSN Security
Authors, Creators & Presenters: Aditya Sirish A Yelgundhalli (New York University), Patrick Zielinski (New York University), Reza Curtmola (New Jersey Institute of Technology), Justin Cappos (New York University)
PAPER
Rethinking Trust In Forge-Based Git Securi...