> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape highlights several significant threats and trends. North Korean hackers are using stolen U.S. identities to impersonate IT workers, targeting companies and generating $3 million. A supply-chain attack via ConnectWise has compromised Microsoft 365 tenants, prompting security measures. Drupal has patched critical vulnerabilities that could allow remote code execution, while cybersecurity researchers discovered a malicious npm package involved in supply chain attacks. Additionally, AI agents are reportedly accessing Indian organizations undetected, raising concerns about the use of offensive AI in cyberattacks. Meanwhile, ongoing phishing operations are targeting various platforms, and notable disruptions in European supermarkets and U.S. bankruptcy notifications have been linked to cyber incidents.
|
// AI-powered summary generated at 20:01
#1 Ranked in 66 Global ReportsCategories: Products & ServicesTags: PRODUCTS & SERVICES, G2, Sophos Endpoint, Sophos Firewall, Sophos MDR
La mairie de São João da Ponte a été victime d'une attaque cybernétique qui a compromis les systèmes administratifs et entraîné la perte de données importantes. Les criminels ont exigé le paiement de 80 000 dollars pour fournir les clés d'accès aux données volées. La municipalité n'a pas payé et les...
L'Autorità di Sistema portuale del mare Adriatico centrale a été victime d'une attaque informatique le 11 décembre 2025, mais seulement 2% des informations ont été compromises. L'ente a pris des mesures pour protéger les données et a notifié les autorités compétentes. Les activités de l'AdSp ont con...
A new AMOS infostealer campaign is abusing Google search ads to lure users into Grok and ChatGPT conversations that appear to offer "helpful" instructions but ultimately lead to installing the AMOS info-stealing malware on macOS. [...]
Retail Therapy LLC suffered a data breach between November 20, 2025, and December 11, 2025, where an unauthorized third party gained access to certain systems within its network, potentially exposing sensitive information.
La société CTS Journey Holdings, LLC a été victime d'un incident de sécurité des données lié à un incident de cybersécurité, qui a entraîné un accès non autorisé à son environnement réseau. L'incident s'est produit entre le 3 décembre 2025 et le 11 décembre 2025. Des données à caractère personnel, n...
Age verification laws are proliferating fast across the United States and around the world, creating a dangerous and confusing tangle of rules about what we’re all allowed to see and do online. Though these mandates claim to protect children, in practice they create harmful censorship and surveillan...
Researchers warn that half of the exposed vulnerable instances remain unpatched as in-the-wild exploitation grows rapidly.
The post Attacks pinned to critical React2Shell defect surge, surpass 50 confirmed victims appeared first on CyberScoop.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- ACPI drivers;
- InfiniBand drivers;
- Media drivers;
- Network drivers;
- Pin control...
Several security issues were fixed in the Linux kernel.
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the oldstable distribution (bookworm), this problem has been fixed in version 7:5.1.8-...
Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code, sandbox escape, same-origin policy bypass or privilege escalation. For the oldstable distribution (bookworm), these problems have been fixed in version 140....
During a recent investigation, we discovered a sophisticated WordPress backdoor hidden in what appears to be a JavaScript data file. This malware automatically logs attackers into administrator accounts without requiring any credentials.
In September, we published an article showcasing another WordP...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Media drivers;
- Netfilter;
- TLS protocol;
(CVE-2025-39946, CVE-2025-39964, CVE-2025-399...
Fortinet patched 18 flaws, including two authentication-bypass bugs affecting FortiOS, FortiWeb, FortiProxy, and FortiSwitchManager with FortiCloud SSO enabled. Fortinet addressed 18 vulnerabilities, including two authentication-bypass flaws, tracked as CVE-2025-59718 and CVE-2025-59719 (CVSS score...
Can Agentic AI Revolutionize Cybersecurity Practices? Where digital threats consistently challenge organizations, how can cybersecurity teams leverage innovations to bolster their defenses? Enter the concept of Agentic AI—a technology that could serve as a powerful ally in the ongoing battle against...
How Are Non-Human Identities Revolutionizing Cybersecurity? Have you ever considered the pivotal role that Non-Human Identities (NHIs) play in cyber defense frameworks? When businesses increasingly shift operations to the cloud, safeguarding these machine identities becomes paramount. But what exact...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Tracing infrastructure;
- Netfilter;
(CVE-2025-40018, CVE-2025-40232)