> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape highlights several significant threats and trends. North Korean hackers are using stolen U.S. identities to impersonate IT workers, targeting companies and generating $3 million. A supply-chain attack via ConnectWise has compromised Microsoft 365 tenants, prompting security measures. Drupal has patched critical vulnerabilities that could allow remote code execution, while cybersecurity researchers discovered a malicious npm package involved in supply chain attacks. Additionally, AI agents are reportedly accessing Indian organizations undetected, raising concerns about the use of offensive AI in cyberattacks. Meanwhile, ongoing phishing operations are targeting various platforms, and notable disruptions in European supermarkets and U.S. bankruptcy notifications have been linked to cyber incidents.
|
// AI-powered summary generated at 20:01
A major milestone: Sophos XDR delivers 100% detection coverage in the latest ATT&CK Evaluation.
Interpreting the vast cybersecurity vendor landscape through the lens of industry analysts and testing authorities can immensely enhance your cyber-resilience.
A recently documented cyber attack has set a new global benchmark for digital disruption. A botnet known as Aisuru launched a massive distributed denial-of-service attack, peaking at an unprecedented 29.7 terabits per second against a financial services target. While service providers were ultimatel...
Recent supply-chain breaches show how attackers exploit development tools, compromised credentials, and malicious NPM packages to infiltrate manufacturing and production environments. Acronis explains why secure software development life cycle (SSDLC) practices are now critical for evaluating partne...
Proton analyzed emails from 50 major retail brands to measure inbox overload and hidden tracking during the 2025 holiday shopping season. Here’s what we found.
MSAB’s Q4 2025 Release delivers faster access, smarter insights, and intuitive analysis tools that help investigators cut through data overload with confidence—register now for the December 16 webinar to learn more.
A new phishing kit called Spiderman is being used to target customers of dozens of European banks and cryptocurrency holders with pixel-perfect cloned sites impersonating brands and organizations. [...]
Victoria Dubranova faces charges tied to her alleged role in two groups backed by the Russian government.
The post US charges hacker tied to Russian groups that targeted water systems and meat plants appeared first on CyberScoop.
NK-linked hackers are likely exploiting the React2Shell flaw to deploy a newly discovered remote access trojan, dubbed EtherRAT. North Korea–linked threat actors are likely exploiting the new critical React2Shell flaw (CVE-2025-55182) to deploy a previously unknown remote access trojan called EtherR...
Highlights: Introduction Throughout 2025, we conducted and published several reports related to our research on the Silver Fox APT. In some of them (for example, here), the threat actor delivered the well-known ValleyRAT backdoor, also referred to as Winos or Winos4.0, as the final stage. Since this...
It was discovered that GNU binutils' dump_dwarf_section function could be
manipulated to perform an out-of-bounds read. A local attacker could
possibly use this issue to cause GNU binutils to crash, resulting in a
denial of service. This issue only affected Ubuntu 25.10. (CVE-2025-11081)
It was dis...
The post How Swimlane AI Automation Optimizes Microsoft Security Operations appeared first on AI Security Automation.
The post How Swimlane AI Automation Optimizes Microsoft Security Operations appeared first on Security Boulevard.
The Era of Fragmentation: Why Your Security Stack is Failing You The modern enterprise security environment is complex, often relying on a “best-of-breed” strategy that is anything but the best. This fragmented approach, licensing 15 or more point solutions, creates debilitating problems such as ale...
Spotify's year-end Wrapped is a major marketing success. It's also a privacy landmine. Here's how you can engage your customers instead.
At the beginning of this year, we launched the Year of Browser Bugs (YOBB) project, a commitment to research and share critical architectural vulnerabilities in the browser. Inspired by the iconic Months of Bugs tradition in the 2000s, YOBB was started with a similar purpose — to drive awareness and...
Sens. John Cornyn and Gary Peters are taking another crack at moving legislation meant to help commercial satellite providers defend their networks.
Victoria Dubranova faces over 25 years in prison for links to Russia-backed CARR and NoName hacktivist groups.
The post US Indicts Extradited Ukrainian on Charges of Aiding Russian Hacking Groups appeared first on SecurityWeek.
TechCrunch found Petco's veterinary clinics were spilling customers' personal information and medical histories of their pets to the open web.
Three security vulnerabilities have been disclosed in the Peripheral Component Interconnect Express (PCIe) Integrity and Data Encryption (IDE) protocol specification that could expose a local attacker to serious risks.
The flaws impact PCIe Base Specification Revision 5.0 and onwards in the protocol...
Model Context Protocol (MCP) is quickly becoming the backbone of how AI agents interact with the outside world. It gives agents a standardized way to discover tools, trigger actions, and pull data. MCP dramatically simplifies integration work. In short, MCP servers act as the adapter that grants ac...