> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
Key Takeaways Healthcare breaches have cost an eye‑watering $7.42 million per incident in 2025, and it’s not surprising that regulators are dialing up new requirements like multi‑factor authentication, encryption for all ePHI, and yearly audits. Small practices may be able to get by with basic tools...
Is Your Organization Truly Safe from Non-Human Identity Threats? Could a digital passport be the source of your organization’s next major security breach? Understanding the dynamics of Non-Human Identities (NHIs) is crucial for organizations aiming to secure their operations against cyber threats. W...
Google’s Mandiant security division has come up with an unusual tactic to persuade organizations to stop using the aged and hugely insecure NTLMv1 authentication protocol: publish a data lookup that makes cracking NTLMv1 credentials trivial for attackers.
The intention, Man...
How Can Organizations Effectively Manage Non-Human Identities? Are you aware of the potential threats posed by machine identities in your organization? With cybersecurity professionals navigate the complexities of managing Non-Human Identities (NHIs), understanding the nuances of these machine ident...
How Can Non-Human Identities Enhance Cloud Security? Can organizations truly secure their cloud environments without addressing the role of Non-Human Identities (NHIs)? With technology continues to advance, NHIs have become a crucial component, particularly in managing secrets and enhancing security...
On December 10th, 2025, we received a submission for a Privilege Escalation vulnerability in Advanced Custom Fields: Extended, a WordPress plugin with more than 100,000+ active installations. This vulnerability makes it possible for an unauthenticated attacker to grant themselves administrative priv...
Are You Maximizing the Potential of AI in Cloud-Native Security? The intersection of artificial intelligence (AI) and cloud-native security is transforming how organizations safeguard their digital. With AI capabilities advancing rapidly, security is witnessing unprecedented changes that promise mor...
Ransomware attackers targeting a Fortune 100 company in the finance sector used a new malware strain, dubbed PDFSider, to deliver malicious payloads on Windows systems. [...]
Session 9B: DNN Attack Surfaces
Authors, Creators & Presenters: Myungsuk Moon (Yonsei University), Minhee Kim (Yonsei University), Joonkyo Jung (Yonsei University), Dokyung Song (Yonsei University)
PAPER
ASGARD: Protecting On-Device Deep Neural Networks with Virtualization-Based Trusted Executi...
David Mendenhall discovered that Dungeon Crawl Stone Soup was incorrectly
handling Lua bytecode embedded in an uploaded .crawlrc file. An attacker
could possibly use this issue to execute arbitrary code.
Several security issues were fixed in Apache HTTP Server.
L'autorité italienne de protection des données (Garante) a publié une décision de sanction à l'encontre d'Elba Catering Distribuzioni s.r.l.s., comprenant le prononcé d'une amende de 2 000 €, pour des manquements en lien avec son système de vidéosurveillance.Cette affaire débute par un signalement d...
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) a publié une décision de sanction à l'encontre de Continental Automotive Products SRL, comprenant le prononcé d'une amende de 15 000 €, pour des manquements liés à la minimisation et à la sécurité des donn...
Ingram Micro says a ransomware attack exposed personal data of about 42,000 people, including names, birth dates, SSNs, and job-related details. Ingram Micro is a global technology distributor and supply-chain services company. It acts as a middleman between IT vendors (like Microsoft, Cisco, HP, Ap...
Le Comité européen de la protection des données (CEPD) a adopté un rapport sur l'application de la Directive Police-Justice ainsi que des recommandations sur les règles d'entreprise contraignantes pour les sous-traitants.Dans le cadre de l'évaluation de la Directive Police-Justice par la Commission...
L'Inspection nationale de la protection des données de Lettonie (DVI) a publié des éclaircissements sur la légalité de l'enregistrement secret d'une réunion professionnelle par un salarié.Un salarié qui enregistre une réunion de sa propre initiative devient responsable du traitement des données pers...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Funny Numbers’ appeared first on Security Boulevard.
Visualize web and API coverage, validate attack paths, and confirm every executed action with screenshots and logs in Escape
The post How to Visualize Web & API Coverage with Screenshots and Validate Attack Paths in Escape appeared first on Security Boulevard.
In December 2025, data allegedly breached from the Indian streaming music service "Raaga" was posted for sale to a popular hacking forum. The data contained 10M unique email addresses along with names, genders, ages (in some cases, full date of birth), postcodes and passwords stored as unsalted MD5...
How can organizations find and fix systems vulnerable to Y2K38 — the Unix epoch time overflow problem, also known as Epochalypse?