> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
The incidents occurred amid Gaza protests and suggest human rights violations, Citizen Lab said.
The post Researchers find Jordan government used Cellebrite phone-cracking tech against activists appeared first on CyberScoop.
Britain’s House of Lords voted by an overwhelming margin to ban children under age 16 from accessing social media, setting up a vote on the law in the House of Commons.
Tutoriel Scanopy : apprenez à installer ce scanner réseau via Docker afin de générer une topologie de vos actifs (serveurs, firewalls...) en quelques minutes.
Le post Installation de Scanopy : cet outil open source génère les diagrammes réseau à votre place a été publié sur IT-Connect.
Discover how Ford, Icertis, and TriNet modernized security with Microsoft—embedding Zero Trust, automating defenses, and enabling secure AI innovation at scale.
The post Microsoft Security success stories: Why integrated security is the foundation of AI transformation appeared first on Microsoft Sec...
The Irish government announced that it wants to pass a law that would grant police more surveillance powers, such as using spyware to fight serious crime, while aiming to protect the privacy rights of its citizens.
Obsidian Security today announced that it has extended the reach of its platform for protecting software-as-a-service (SaaS) applications to include any integrations. Additionally, the company is now making it possible to limit which specific end users of a SaaS application are allowed to grant and...
To all those who are fighting the good fight in the world of cyber, keep collaborating to ensure our world never succumbs to the chaos of the Upside Down.
The post The Upside Down is Real: What Stranger Things Teaches Us About Modern Cybersecurity appeared first on SecurityWeek.
A critical security flaw has been disclosed in the GNU InetUtils telnet daemon (telnetd) that went unnoticed for nearly 11 years.
The vulnerability, tracked as CVE-2026-24061, is rated 9.8 out of 10.0 on the CVSS scoring system. It affects all versions of GNU InetUtils from version 1.9.3 up to and i...
I’ve seen this movie before. That’s why a recent LinkedIn post by Ilya Kabanov stopped me mid-doomscroll. Kabanov described how frontier AI companies are quietly but decisively shifting into cybersecurity. They are not joining as partners or tacking on features. They are stepping up as product make...
Microsoft will soon add new fraud protection features to Teams calls, warning users about external callers who attempt to impersonate trusted organizations in social engineering attacks. [...]
An operational security failure allowed researchers to recover data that the INC ransomware gang stole from a dozen U.S. organizations. [...]
Admins say attackers are still getting in despite recent patches FortiGate firewalls are getting quietly reconfigured and stripped down by miscreants who've figured out how to sidestep SSO protections and grab sensitive settings right out of the box.…
Critical vulnerability in Appsmith allows account takeover via flawed password reset process
Session 9D: Github + OSN Security
Authors, Creators & Presenters: Aditya Sirish A Yelgundhalli (New York University), Patrick Zielinski (New York University), Reza Curtmola (New Jersey Institute of Technology), Justin Cappos (New York University)
PAPER
Rethinking Trust In Forge-Based Git Securi...
Bunmi Bloom, co-founder of Sena Forensics, joins the Forensic Focus Podcast to discuss the emotional reality of working in digital forensics and the psychological toll of long-term exposure to traumatic material.
TechCrunch obtained a sample of the stolen data, which contained names, email addresses, dates of birth, and the user's approximate geographic location. Under Armour confirmed some sensitive information was taken in the breach.
L'Agence espagnole de protection des données (AEPD) a publié une décision déclarant une infraction à l'encontre du ministère de l'éducation du gouvernement de Castille-et-León pour des manquements liés au non-respect d'une de ses décisions antérieures.Cette affaire débute par une plainte concernant...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié une décision de sanction de 3 500 000 € à l'encontre d'une société pour avoir transmis les données des membres de son programme de fidélité à un réseau social à des fins publicitaires, sans base légale valable. Cette affaire d...
Note: This is a guest post by IT security consultant Adarsh Kumar. I’ve been using Burp Suite day to day for years, so when Burp AI was introduced, I was curious how it would actually hold up dur
Le président de l'Office de Protection des Données Personnelles (UODO) polonais a communiqué au vice-ministre des Affaires étrangères la nécessité d'intégrer au droit national des mesures protégeant spécifiquement les délégués à la protection des données (DPD) contre un licenciement lié à l'exercice...