> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
Session 9D: Github + OSN Security
Authors, Creators & Presenters: Jian Cui (Indiana University), Hanna Kim (KAIST), Eugene Jang (S2W Inc.), Dayeon Yim (S2W Inc.), Kicheol Kim (S2W Inc.), Yongjae Lee (S2W Inc.), Jin-Woo Chung (S2W Inc.), Seungwon Shin (KAIST), Xiaojing Liao (Indiana University)...
CVE-2025-59718, a critical authentication bypass flaw that attackers exploited in December 2025 to compromise FortiGate appliances, appears to persist in newer, purportedly fixed releases of the underlying FortiOS. According to Fortinet, CVE-2025-59718 had been fixed in FortiOS versions 7.6.4 or abo...
Le ComitĂ© europĂ©en de la protection des donnĂ©es (EDPB) et le ContrĂŽleur europĂ©en de la protection des donnĂ©es (EDPS) ont adoptĂ© un avis conjoint sur la proposition de la Commission europĂ©enne relative au "Digital Omnibus", soutenant la simplification de la mise en Ćuvre de la lĂ©gislation sur lâintel...
Le prĂ©sident de l'autoritĂ© polonaise de protection des donnĂ©es (UODO) a contestĂ© la dĂ©cision du parquet de classer sans suite une enquĂȘte concernant l'installation d'une vidĂ©osurveillance dans la salle de rĂ©animation d'un hĂŽpital.L'enquĂȘte, initiĂ©e suite Ă une information du MĂ©diateur, portait sur u...
Zoom addressed a critical security vulnerability, tracked as CVE-2026-22844, that could result in remote code execution. Cloud-based video conferencing and online collaboration platform Zoom released security updates to address multiple vulnerabilities, including command injection, tracked as CVE-20...
L'autoritĂ© espagnole de protection des donnĂ©es a aujourd'hui publiĂ© une dĂ©cision de sanction Ă l'encontre de A.A.A. (comprenant le prononcĂ© d'une amende de 2 000 âŹ) pour des manquements en lien avec son systĂšme de vidĂ©osurveillance.Cette affaire dĂ©bute par une plainte d'une ancienne employĂ©e, signal...
Cisco has fixed a critical remote code execution vulnerability (CVE-2026-20045) in some of its unified communications solutions thatâs being targeted by attackers in the wild, the company announced on Wednesday via a security advisory. About CVE-2026-20045 CVE-2026-20045 is a code injection vulnerab...
On January 12th, 2026, we received a submission for a Backdoor vulnerability in the LA-Studio Element Kit for Elementor, a WordPress plugin with more than 20,000+ active installations. This vulnerability makes it possible for an unauthenticated attacker to create malicious administrator users.
The p...
Phishing campaign tries to reel in master passwords Password managers make great targets for attackers because they can hold many of the keys to your kingdom. Now, LastPass has warned customers about phishing emails claiming that action is required ahead of scheduled maintenance and told them not to...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
A new EPIC report says data brokers, ad-tech surveillance, and ICE enforcement are among the factors leading to a âhealth privacy crisisâ that is eroding trust and deterring people from seeking care.
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD âSauropodsâ appeared first on Security Boulevard.
Fortinet customers are seeing attackers exploiting a patch bypass for a previously fixed critical FortiGate authentication vulnerability (CVE-2025-59718) to hack patched firewalls. [...]
It was discovered that OpenCC incorrectly handled truncated UTF-8 input.
An attacker could possibly use this issue to cause OpenCC to crash,
resulting in a denial of service.
GLib could be made to crash or run programs if it received specially crafted input.
As many as 3,136 individual IP addresses linked to likely targets of the Contagious Interview activity have been identified, with the campaign claiming 20 potential victim organizations spanning artificial intelligence (AI), cryptocurrency, financial services, IT services, marketing, and software de...
It was discovered that GLib incorrectly handled the buffered input stream
API. An attacker could use this issue to cause GLib to crash, resulting in
a denial of service, or possibly execute arbitrary code.
AI risk isnât about modelsâitâs about access. Learn how embedded AI across SaaS creates silent security risk, and what teams can do to regain control.
The post AI Risk in SaaS: What Security Teams Are Missing appeared first on Security Boulevard.
An attempt to drop two RATs on a system used an uncanny assortment of legitimate Windows tools.