> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape highlights several significant threats and trends. North Korean hackers are using stolen U.S. identities to impersonate IT workers, targeting companies and generating $3 million. A supply-chain attack via ConnectWise has compromised Microsoft 365 tenants, prompting security measures. Drupal has patched critical vulnerabilities that could allow remote code execution, while cybersecurity researchers discovered a malicious npm package involved in supply chain attacks. Additionally, AI agents are reportedly accessing Indian organizations undetected, raising concerns about the use of offensive AI in cyberattacks. Meanwhile, ongoing phishing operations are targeting various platforms, and notable disruptions in European supermarkets and U.S. bankruptcy notifications have been linked to cyber incidents.
|
// AI-powered summary generated at 20:01
Cybercriminals and foreign adversaries are exploiting gaps in our digital armor. These essential reforms can help American cybersecurity catch up.
The post The ten key reforms that can close America’s cybersecurity gaps appeared first on CyberScoop.
NCSC raises alert on “dangerous” misunderstanding of emergent class of vulnerability in generative artificial intelligence (AI) applications.
Deux jeunes Britanniques liés à Scattered Spider nient toute implication dans l’attaque contre TfL, sur fond de coopérations NCA–FBI et de charges passibles de la perpétuité....
Cloud security is changing. Attackers are no longer just breaking down the door; they are finding unlocked windows in your configurations, your identities, and your code.
Standard security tools often miss these threats because they look like normal activity. To stop them, you need to see exactly ho...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added a security flaw impacting the WinRAR file archiver and compression utility to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability, tracked as CVE-2025-6218 (CVSS...
The XSS vulnerability could allow remote attackers to execute arbitrary JavaScript code with administrator privileges.
The post Ivanti EPM Update Patches Critical Remote Code Execution Flaw appeared first on SecurityWeek.
Fuite géante chez Coupang : 33,7 millions de comptes exposés et le modèle sud-coréen de protection des données sous pression....
Cryptomixer démantelé : Europol, la Suisse et l’Allemagne frappent un mixeur bitcoin clé du blanchiment crypto et saisissent plus de 25 millions d'euros....
Affecting Solution Manager, Commerce Cloud, and jConnect SDK, the bugs could lead to code injection and remote code execution.
The post SAP Patches Critical Vulnerabilities With December 2025 Security Updates appeared first on SecurityWeek.
Le Justice stoppe un faux site TickMill birman et cible les réseaux d’arnaque crypto liés aux centres d’escroquerie régionaux....
01flip is a new ransomware family fully written in Rust. Activity linked to 01flip points to alleged dark web data leaks.
The post 01flip: Multi-Platform Ransomware Written in Rust appeared first on Unit 42.
S21 VisionX Spotlight Week 2 showcases faster victim ID, smarter filtering and rapid CSAM triage to help investigators cut through noise and focus on what matters.
Sonatype has claimed that 13% of Log4j versions downloaded this year were vulnerable to the legacy critical Log4Shell bug
Backslash Security announced the launch of its end-to-end solution for the secure use of Model Context Protocol (MCP) servers across software development environments. As organizations increasingly adopt AI-native coding agents and integrated development environments (IDEs), the Backslash platform i...
Insufficient validation of incoming notifies over TCP in PDNS Recursor, a resolving name server, could result in denial of service. For the stable distribution (trixie), this problem has been fixed in version 5.2.7-0+deb13u1. We recommend that you upgrade your pdns-recursor packages.
Dozens of vulnerabilities have been patched by the industrial giants across their products.
The post ICS Patch Tuesday: Vulnerabilities Fixed by Siemens, Rockwell, Schneider appeared first on SecurityWeek.
December’s Patch Tuesday sees the release of patches for over 50 CVEs including three zero-days
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added Microsoft Windows and WinRAR flaws to its Known Exploited Vulnerabilities (KEV)...
BigID announced Activity Explorer, a new capability that delivers auditability and granular activity investigation to strengthen insider risk detection and response. With Activity Explorer, organizations can review, search, and analyze activity across cloud and on-prem environments, including AWS S3...
Akira Ransomware Strikes PH Molds Limited in Canada Akira has claimed a ransomware attack against PH Molds Limited, a Canadian plastic injection mold design and manufacturing company, and is threatening to leak 35 GB of corporate data if a payment is not made. The article outlines what is known abou...