> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
The House Homeland Security Committee grilled Madhu Gottumukkala, the acting director of the agency, over cutbacks both broad and specific.
The post Lawmakers probe CISA leader over staffing decisions appeared first on CyberScoop.
PcComponentes, a major technology retailer in Spain, has denied claims of a data breach on its systems impacting 16 million customers, but confirmed it suffered a credential stuffing attack. [...]
BOSTON, Jan. 21, 2026, CyberNewswire â Reflectiz today announced the release of its 2026 State of Web Exposure Research, revealing a sharp escalation in client?side risk across global websites, driven primarily by third?party applications, marketing tools, and unmanaged digital ⊠(moreâŠ)
The post N...
In July 2025, Ingram Micros suffered devastating consequences from a ransomware in which the IT distributorâs logistics were paralyzed for a week.
It has now emerged that sensitive data was also leaked. As Ingram Micro confirmed in a mandatory filing with US authorities, mo...
Oracle has handed security teams their first big patching workload of the year, with its latest quarterly update containing a hefty 337 security fixes across its product range, including 27 rated critical.
This imposing number of patches wonât surprise anyone whose job it i...
Session 9D: Github + OSN Security
Authors, Creators & Presenters: Jian Cui (Indiana University), Hanna Kim (KAIST), Eugene Jang (S2W Inc.), Dayeon Yim (S2W Inc.), Kicheol Kim (S2W Inc.), Yongjae Lee (S2W Inc.), Jin-Woo Chung (S2W Inc.), Seungwon Shin (KAIST), Xiaojing Liao (Indiana University)...
CVE-2025-59718, a critical authentication bypass flaw that attackers exploited in December 2025 to compromise FortiGate appliances, appears to persist in newer, purportedly fixed releases of the underlying FortiOS. According to Fortinet, CVE-2025-59718 had been fixed in FortiOS versions 7.6.4 or abo...
Le ComitĂ© europĂ©en de la protection des donnĂ©es (EDPB) et le ContrĂŽleur europĂ©en de la protection des donnĂ©es (EDPS) ont adoptĂ© un avis conjoint sur la proposition de la Commission europĂ©enne relative au "Digital Omnibus", soutenant la simplification de la mise en Ćuvre de la lĂ©gislation sur lâintel...
Le prĂ©sident de l'autoritĂ© polonaise de protection des donnĂ©es (UODO) a contestĂ© la dĂ©cision du parquet de classer sans suite une enquĂȘte concernant l'installation d'une vidĂ©osurveillance dans la salle de rĂ©animation d'un hĂŽpital.L'enquĂȘte, initiĂ©e suite Ă une information du MĂ©diateur, portait sur u...
Zoom addressed a critical security vulnerability, tracked as CVE-2026-22844, that could result in remote code execution. Cloud-based video conferencing and online collaboration platform Zoom released security updates to address multiple vulnerabilities, including command injection, tracked as CVE-20...
L'autoritĂ© espagnole de protection des donnĂ©es a aujourd'hui publiĂ© une dĂ©cision de sanction Ă l'encontre de A.A.A. (comprenant le prononcĂ© d'une amende de 2 000 âŹ) pour des manquements en lien avec son systĂšme de vidĂ©osurveillance.Cette affaire dĂ©bute par une plainte d'une ancienne employĂ©e, signal...
Cisco has fixed a critical remote code execution vulnerability (CVE-2026-20045) in some of its unified communications solutions thatâs being targeted by attackers in the wild, the company announced on Wednesday via a security advisory. About CVE-2026-20045 CVE-2026-20045 is a code injection vulnerab...
On January 12th, 2026, we received a submission for a Backdoor vulnerability in the LA-Studio Element Kit for Elementor, a WordPress plugin with more than 20,000+ active installations. This vulnerability makes it possible for an unauthenticated attacker to create malicious administrator users.
The p...
Phishing campaign tries to reel in master passwords Password managers make great targets for attackers because they can hold many of the keys to your kingdom. Now, LastPass has warned customers about phishing emails claiming that action is required ahead of scheduled maintenance and told them not to...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
A new EPIC report says data brokers, ad-tech surveillance, and ICE enforcement are among the factors leading to a âhealth privacy crisisâ that is eroding trust and deterring people from seeking care.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD âSauropodsâ appeared first on Security Boulevard.
Fortinet customers are seeing attackers exploiting a patch bypass for a previously fixed critical FortiGate authentication vulnerability (CVE-2025-59718) to hack patched firewalls. [...]
It was discovered that OpenCC incorrectly handled truncated UTF-8 input.
An attacker could possibly use this issue to cause OpenCC to crash,
resulting in a denial of service.