> TODAY'S SUMMARY (195 articles)
Today's cybersecurity landscape highlights several critical trends and threats. Vanderbilt University is recovering from a cyberattack, with claims of stolen data yet to be confirmed. The Qilin ransomware group has reportedly targeted over 365 organizations in recent months, emphasizing the growing threat of ransomware affiliates. A significant number of vulnerabilities were addressed in Microsoft's November Patch Tuesday, including a zero-day flaw in Outlook that is actively exploited. Furthermore, recent reports indicate that hackers are leveraging AI tools for credential theft and impersonation fraud, raising concerns about the security of AI systems. Lastly, vulnerabilities in Cisco BroadWorks and Openwave systems are being actively exploited despite available patches, illustrating the ongoing challenge of timely vulnerability management.
|
// AI-powered summary generated at 20:00
How Secure Are Your Machine Identities? Where technology drives growth and innovation, are we adequately securing the machine identities that power our digital? Non-human identities (NHIs), encompassing machine identities like APIs, service accounts, and IoT devices, play a pivotal role in modern cy...
Are Organizations Truly Satisfied with the Role of AI in Secrets Security Management? How can organizations ensure robust protection for their cloud environments while leveraging AI technologies for secrets security management? The incorporation of AI into secrets security solutions is reshaping how...
Grzegorz Grasza discovered a vulnerability in the Openstack middleware to provide authentication and authorization features to web services other than Keystone: If an external OAuth provider is configured, authentication headers are insufficiently sanitised, which could result in privilege escalatio...
How Can Non-Human Identities Enhance System Security? Is your organization equipped to handle the complexities of system security with the rise of Agentic AI? The advent of Agentic AI has significantly impacted how organizations must approach cybersecurity, particularly with the rise of Non-Human Id...
How Can Non-Human Identities Revolutionize Cybersecurity? Where systems interact autonomously and data flows seamlessly across networks, have you considered the emerging role of non-human identities (NHIs) in cybersecurity? NHIs, often overlooked, play a pivotal role in maintaining the integrity and...
Threat actors use PDFSIDER malware with social engineering and DLL sideloading to bypass AV/EDR, and ransomware gangs already abuse it. Resecurity has learned about PDFSIDER during an investigation of a network intrusion attempt that was successfully prevented by a Fortune 100 energy corporation. Th...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
We're taking part in Copyright Week, a series of actions and discussions supporting key principles that should guide copyright policy. Every day this week, various groups are taking on different elements of copyright law and policy, and addressing what's at stake, and what we need to do to make sure...
Introduction Enzoic provides real-time alerts when user credentials are exposed in data breaches, and integrating these alerts into your security operations center (SOC) can greatly enhance your threat response. Microsoft Sentinel is a cloud-native SIEM (Security Information and Event Management) pl...
The voluntary framework would provide legal clarity to third-party AI researchers, including those who study safety and other “unexpected” AI behaviors.
The post HackerOne rolls out industry framework to support ‘good faith’ AI research appeared first on CyberScoop.
The revelation comes as part of a series of corrections in a legal case over DOGE’s access to Social Security Administration data.
Airlock Digital, a leader in proactive application control and endpoint security, announced the release of The Total Economic Impact (TEI) of Airlock Digital, an independent study commissioned by Airlock Digital and conducted by Forrester Consulting. The study demonstrates a s...
Check Point dug into the details of VoidLink and found a sophisticated and quickly developed malware that was mostly generated using AI and putting a spotlight on what the future of cyber threats looks like.
The post VoidLink Represents the Future of AI-Developed Malware: Check Point appeared first...
The online mentoring site UStrive exposed email addresses, phone numbers, and other non-public information to other logged-in users. The nonprofit told TechCrunch that the issue is now fixed, but wouldn't commit to alerting affected individuals.
A new tool to help security teams quantify AI risk and prepare for 2026 regulations.
The post Introducing Mend.io’s AI Security Maturity Survey + Compliance Checklist available today appeared first on Security Boulevard.
Atlanta, GA, United States, 20th January 2026, CyberNewsWire
The post Airlock Digital Announces Independent TEI Study Quantifying Measurable ROI & Security Impact appeared first on Security Boulevard.
Under the new rules, measures for 5G cybersecurity would become mandatory.
The post EU Plans Phase Out of High Risk Telecom Suppliers, in Proposals Seen as Targeting China appeared first on SecurityWeek.
Session 9C: Phishing & Fraud 2
Authors, Creators & Presenters: Boladji Vinny Adjibi (Georgia Tech), Athanasios Avgetidis (Georgia Tech), Manos Antonakakis (Georgia Tech), Michael Bailey (Georgia Tech), Fabian Monrose (Georgia Tech)
PAPER
The Guardians of Name Street: Studying the Defensive...
Amazon Web Services (AWS) is pleased to announce that the Fall 2025 System and Organization Controls (SOC) 1, 2, and 3 reports are now available. The reports cover 185 services over the 12-month period from October 1, 2024–September 30, 2025, giving customers a full year of assurance. These reports...
The recently discovered cloud-focused VoidLink malware framework is believed to have been developed by a single person with the help of an artificial intelligence model. [...]