> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
L'autorité italienne de protection des données (Garante) a publié une décision de sanction à l'encontre de l'Institut Scolaire de Roverbella, comprenant le prononcé d'une amende de 1 000 €, pour des manquements en lien avec la communication non autorisée de données personnelles, y compris des donnée...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié ses recommandations finales concernant les modalités de recueil du consentement multi-terminaux pour l'utilisation de cookies et autres traceurs.Ces recommandations, issues d'une consultation publique menée en avril 2025, s'ap...
The phishing campaign targeted users on WhatsApp, including an Iranian-British activist, and stole the credentials of a Lebanese cabinet minister and at least one journalist.
Le portail de l'administration française Service-public.gouv.fr a informé les utilisateurs concernés d'une violation de données personnelles résultant d'un incident de sécurité chez un de ses sous-traitants.Cet incident, survenu entre le 4 et le 9 janvier 2026, a occasionné la compromission de donné...
An advanced threat actor tracked as UAT-8837 and believed to be linked to China has been focusing on critical infrastructure systems in North America, gaining access by exploiting both known and zero-day vulnerabilities. [...]
In a report a week before its Davos conference, the World Economic Foundation said 64% world business leaders are most worried about cyber fraud, replacing ransomware at their top concern. AI vulnerabilities also ranked high, as did threats fueled by geopolitics. The group argued that a coordinated...
Here’s how cybercriminals cash in on companies’ online doppelgängers, and what can be done about it.
Microsoft claims it's a Secure Launch bug We're not saying Copilot has become sentient and decided it doesn't want to lose consciousness. But if it did, it would create Microsoft's January Patch Tuesday update, which has made it so that some PCs flat-out refuse to shut down or hibernate, no matter h...
La mise à jour de janvier 2026 (KB5074109) pour Windows 11 bloque Outlook s'il y a un ou plusieurs profils POP configurés. Détails et solution dans cet article.
Le post La mise à jour de janvier pour Windows 11 bloque Outlook si vous utilisez un profil POP ! a été publié sur IT-Connect.
Black Basta has been active since at least early 2022 and is believed to be responsible for extorting hundreds of companies, hospitals and public institutions worldwide — including Swiss industrial giant ABB and U.S. healthcare provider Ascension — causing hundreds of millions of dollars in estimate...
Verizon has begun sending text messages with instructions on how to redeem a $20 account credit for last week's nationwide wireless outage. [...]
Other noteworthy stories that might have slipped under the radar: BodySnatcher agentic AI hijacking, Telegram IP exposure, shipping systems hacked by researcher.
The post In Other News: FortiSIEM Flaw Exploited, Sean Plankey Renominated, Russia’s Polish Grid Attack appeared first on SecurityWeek.
In a scathing opinion, Judge David Carter called the federal government’s demands for unredacted voter data “unprecedented and illegal.”
The post Federal court dismisses Trump DOJ lawsuit seeking California voter data appeared first on CyberScoop.
Critical WordPress Plugin Flaw Under Active Exploitation A maximum-severity vulnerability in the WordPress plugin Modular DS is being actively exploited in the wild, according to security firm Patchstack. The flaw, tracked as CVE-2026-23550, carries a CVSS score of 10.0 and allows unauthenticated at...
Ransomware kingpin who escaped Armenian custody is believed to be lying low back home German cops have added Russian national Oleg Evgenievich Nefekov to their list of most-wanted criminals for his services to ransomware.…
A data breach at Canada’s investment watchdog, Canadian Investment Regulatory Organization (CIRO), impacted about 750,000 people. The Canadian Investment Regulatory Organization (CIRO) is Canada’s national self-regulatory body overseeing investment dealers and marketplaces, protecting investors, enf...
Cisco has finally shipped security updates for its Email Security Gateway and Secure Email and Web Manager devices, which fix CVE-2025-20393, a vulnerability in the devices’ AsyncOS that has been exploited as a zero-day by suspected Chinese attackers since at least late November 2025. The company re...
The company will use the investment to accelerate the adoption of its solution among financial institutions and digital businesses.
The post Monnai Raises $12 Million for Identity and Risk Data Infrastructure appeared first on SecurityWeek.
Cyberinfo ZATAZ de la semaine du 16 janvier 2026 : hack, piratage et opérations internationales cyber....
More than a decade after Aaron Swartz’s death, the United States is still living inside the contradiction that destroyed him.
Swartz believed that knowledge, especially publicly funded knowledge, should be freely accessible. Acting on that, he downloaded thousands of academic articles from the JSTOR...