> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
The lawsuit comes a day after a TSA official vigorously defended the practice as critical to ânational securityâ in testimony to Congress.Â
The post Watchdog group sues for TSA data sharing agreement with ICEÂ appeared first on CyberScoop.
pyasn1 could be made to crash if it received specially crafted input.
Ianis Antropenko, a Russian national living in California, admitted to committing ransomware attacks against at least 50 victims. He faces up to 25 years in jail.
The post Leader of ransomware crew pleads guilty to four-year crime spree appeared first on CyberScoop.
Vlatko Kosturjak discovered that BIND, a DNS server implementation, does not properly handle malformed BRID/HHIT records, which may result in denial of service (named daemon crash). For the oldstable distribution (bookworm), this problem has been fixed in version 1:9.18.44-1~deb12u1.
Session 9D: Github + OSN Security
Authors, Creators & Presenters: Aditya Sirish A Yelgundhalli (New York University), Patrick Zielinski (New York University), Reza Curtmola (New Jersey Institute of Technology), Justin Cappos (New York University)
PAPER
Rethinking Trust In Forge-Based Git Securi...
Ring says the new feature will identify if video edits have been made, even if they're minor.
Amit Sheps, head of product marketing at CyCognito, discusses the growing challenges cybersecurity teams face as artificial intelligence accelerates the expansion of enterprise attack surfaces. He explains why visibility, continuous assessment, and proactive risk management are becoming essential i...
A new Android click-fraud trojan family uses TensorFlow ML to visually detect and tap ads, bypassing traditional script-based click techniques. Researchers at cybersecurity firm Dr.Web discovered a new Android click-fraud trojan family that uses TensorFlow.js ML models to visually detect and tap ads...
Logging in, not breaking in Unknown attackers are abusing Microsoft SharePoint file-sharing services to target multiple energy-sector organizations, harvest user credentials, take over corporate inboxes, and then send hundreds of phishing emails from compromised accounts to contacts inside and outsi...
The developer of the popular curl command-line utility and library announced that the project will end its HackerOne security bug bounty program at the end of this month, after being overwhelmed by low-quality AI-generated vulnerability reports. [...]
In this week's newsletter, Bill hammers home the old adage, "Know your environment" â even throughout alert fatigue.
The case dates to May 2022, when the court launched a probe into the alleged spying on devices belonging to Prime Minister Pedro SĂĄnchez and Defence Minister Margarita Robles.
Hackers began exploiting an authentication bypass vulnerability in SmarterTools' SmarterMail email server and collaboration tool that allows resetting admin passwords. [...]
La Commission Nationale de l'Informatique et des Libertés (CNIL) a initié une concertation en vue d'élaborer une recommandation sur la preuve du consentement dans le secteur du marketing.Cette démarche répond aux interrogations récurrentes des professionnels sur les exigences applicables à la preuve...
TL;DR Crypto-enabled fraud cost victims at least $14 billion globally in 2025, with sophisticated scams like pig butchering and AI-poweredâŠ
The post Why Now is the Time for the UK to Lead the Global Fight against Crypto-enabled Fraud appeared first on Chainalysis.
Several security issues were fixed in libxml2.
Depuis le 15 janvier 2026, une vague d'attaques automatisées a été observée : des firewalls Fortinet sont piratés et les configurations FortiGate volées.
Le post FortiCloud SSO : des firewalls Fortinet piratés, des configurations volées ! a été publié sur IT-Connect.
Miami, Florida, 22nd January 2026, CyberNewsWire
The post Halo Security Achieves SOC 2 Type II Compliance, Demonstrating Sustained Security Excellence Over Time appeared first on Security Boulevard.
Cybersecurity researchers have disclosed details of a new ransomware family called Osiris that targeted a major food service franchisee operator in Southeast Asia in November 2025.
The attack leveraged a malicious driver called POORTRY as part of a known technique referred to as bring your own vulne...
The alleged risks of being publicly identified have not stopped DHSÂ and ICE employees from creating profiles on LinkedIn, even as Kristi Noem threatens to treat revealing agents' identities as a crime.