> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape highlights several significant threats and trends. North Korean hackers are using stolen U.S. identities to impersonate IT workers, targeting companies and generating $3 million. A supply-chain attack via ConnectWise has compromised Microsoft 365 tenants, prompting security measures. Drupal has patched critical vulnerabilities that could allow remote code execution, while cybersecurity researchers discovered a malicious npm package involved in supply chain attacks. Additionally, AI agents are reportedly accessing Indian organizations undetected, raising concerns about the use of offensive AI in cyberattacks. Meanwhile, ongoing phishing operations are targeting various platforms, and notable disruptions in European supermarkets and U.S. bankruptcy notifications have been linked to cyber incidents.
|
// AI-powered summary generated at 20:01
Are Non-Human Identities (NHIs) the Missing Link in Your Cloud Security Strategy? Where technology is reshaping industries, the concept of Non-Human Identities (NHIs) has emerged as a critical component in cloud-native security strategies. But what exactly are NHIs, and why are they essential in ach...
A new Android malware called DroidLock has emerged with capabilities to lock screens for ransom payments, erase data, access text messages, call logs, contacts, and audio data. [...]
Prosecutors called criminal schemes to route computer chips to China a threat to U.S. national security, while Democrats have criticized the White House’s decision.
The post As White House moves to send AI chips to China, Trump’s DOJ prosecutes chip smugglers appeared first on CyberScoop.
More than half of internet-exposed instances already compromised Attackers are actively exploiting a zero-day bug in Gogs, a popular self-hosted Git service, and the open source project doesn't yet have a fix.…
The massive data breach at the South Korean retail giant Coupang affects more than half of the country's population.
Sen. Ed Markey (D-MA) asked Ring in October about its privacy policies and how it intends to protect individuals recorded by its new facial recognition technology feature called Familiar Faces.
Microsoft addressed over 1,100 CVEs as part of Patch Tuesday releases in 2025, including 40 zero-day vulnerabilities.
Key takeaways:
Microsoft's 2025 Patch Tuesday releases addressed 1,130 CVEs. This is the second year in a row where the CVE count was over 1,000.
Elevation of Privilege vulnerabil...
React2Shell continues to witness heavy exploitation, with threat actors leveraging the maximum-severity security flaw in React Server Components (RSC) to deliver cryptocurrency miners and an array of previously undocumented malware families, according to new findings from Huntress.
This includes a L...
The state of streaming is... bad. It’s very bad. The first step in wanting to watch anything is a web search: “Where can I stream X?” Then you have to scroll past an AI summary with no answers, and then scroll past the sponsored links. After that, you find out that the thing you want to watch was ma...
Posted by Chrome Root Program Team
Secure connections are the backbone of the modern web, but a certificate is only as trustworthy as the validation process and issuance practices behind it. Recently, the Chrome Root Program and the CA/Browser Forum have taken decisive steps toward a more secure...
Session 5C: Federated Learning 1
Authors, Creators & Presenters: Phillip Rieger (Technical University of Darmstadt), Alessandro Pegoraro (Technical University of Darmstadt), Kavita Kumari (Technical University of Darmstadt), Tigist Abera (Technical University of Darmstadt), Jonathan Knauer (Tec...
The Cybersecurity and Infrastructure Security Agency (CISA), alongside several other U.S. and international agencies, released an advisory covering the cyberattacks launched by CyberArmyofRussia_Reborn (CARR), NoName057(16) and several related groups.
Officials in Cambridge, Massachusetts, and Eugene, Oregon, found that some Flock Safety license plate readers were still active after the municipalities asked for services to be terminated.
Microsoft is working on a new Teams security feature that will analyze suspicious traffic with external domains to help IT administrators tackle potential security threats. [...]
New research has uncovered exploitation primitives in the .NET Framework that could be leveraged against enterprise-grade applications to achieve remote code execution.
WatchTowr Labs, which has codenamed the "invalid cast vulnerability" SOAPwn, said the issue impacts Barracuda Service Center RMM, I...
AttackIQ has issued recommendations in response to the Cybersecurity Advisory (CSA) released by the Cybersecurity and Infrastructure Security Agency (CISA) on December 9, 2025, which details the ongoing targeting of critical infrastructure by pro-Russia hacktivists.
The post Response to CISA Advisor...
The U.S. National Institute of Standards and Technology (NIST) is building a taxonomy of attack and mitigations for securing artificial intelligence (AI) agents. Speaking at the AI Summit New York conference, Apostol Vassilev, a research team supervisor for NIST, told attendees that the arm of the...
L’autorité coréenne de protection des données a publié une décision invitant la société Coupang à améliorer ses conditions d’utilisation, ses procédures de suppression de compte, ainsi que ses mesures de notification et de prévention des préjudices secondaires à la suite d’une fuite de données.Cette...
Cisco Vulnerability Management (formerly Kenna) has long been a valuable partner for security teams. With its end-of-life now underway, Tenable One offers a clear path forward, delivering end-to-end unified exposure management for the future of risk management.
Key takeaways:
Tenable’s strong part...
L'Agence espagnole de protection des données (AEPD) lance le Laboratoire de l'AEPD, un espace dédié à la production de connaissance, à l'analyse prospective, à la coopération et à la diffusion de bonnes pratiques en matière de protection des données.Le Laboratoire, projet inscrit au Plan stratégique...