> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape highlights several significant threats and trends. North Korean hackers are using stolen U.S. identities to impersonate IT workers, targeting companies and generating $3 million. A supply-chain attack via ConnectWise has compromised Microsoft 365 tenants, prompting security measures. Drupal has patched critical vulnerabilities that could allow remote code execution, while cybersecurity researchers discovered a malicious npm package involved in supply chain attacks. Additionally, AI agents are reportedly accessing Indian organizations undetected, raising concerns about the use of offensive AI in cyberattacks. Meanwhile, ongoing phishing operations are targeting various platforms, and notable disruptions in European supermarkets and U.S. bankruptcy notifications have been linked to cyber incidents.
|
// AI-powered summary generated at 20:01
De multiples vulnérabilités ont été découvertes dans les produits Intel. Elles permettent à un attaquant de provoquer une élévation de privilèges et une atteinte à la confidentialité des données.
De multiples vulnérabilités ont été découvertes dans Microsoft Windows. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance. Microsoft indique que la vulnérabilité CVE-2025-62221...
Developers are accustomed to the cloud, where a virtual machine (VM) can be launched in seconds. But in many enterprises, especially in regulated industries, requesting and receiving a VM can take a staggering 60 to 90 days. This kind of delay can stifle innovation and slow down critical projects. B...
Une vulnérabilité a été découverte dans Microsoft Azure Monitor Agent. Elle permet à un attaquant de provoquer une exécution de code arbitraire à distance.
L'Instituto Nacional de VĂas (InvĂas) en Colombie a subi un grave ataque cibernĂ©tique, ce qui a entraĂ®nĂ© une perte d'internet pendant près de 48 heures. L'entitĂ© a dĂ©posĂ© une plainte auprès de la FiscalĂa General de la NaciĂłn. Cet incident s'ajoute Ă d'autres attaques que l'entitĂ© a subies ces derni...
La Laurentius-Apotheke à Mönchengladbach a été victime d'une attaque cybernétique.
A major milestone: Sophos XDR delivers 100% detection1 coverage in the latest ATT&CK Evaluation.Categories: Products & Services, Security OperationsTags: MITRE ATT&CK, Sophos Endpoint, Sophos EDR, Sophos XDR
ICM Properties, Inc. suffered a data security incident that may have resulted in unauthorized access to some individuals' personal information. The incident occurred between December 9, 2025, and December 10, 2025. ICM Properties has taken steps to enhance the security of its systems and data to red...
The Lewis Bear Company suffered a data breach, prompting the company to notify customers to review their account statements and credit reports for suspicious activity. Customers are advised to contact the company or law enforcement if they detect any fraudulent activity. A cyberattack was claimed by...
Plus critical critical Notepad++, Ivanti, and Fortinet updates, and one of these patches an under-attack security hole Happy December Patch Tuesday to all who celebrate. This month's patch party includes one Microsoft flaw under exploitation, plus two others listed as publicly known – but just 57 CV...
Multiple security issues were discovered in the WordPress blogging tool, which could result in cross-site scripting or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 6.1.9+dfsg1-0+deb12u1. We recommend that you upgrade your wordpress pack...
The Patch Tuesday for December of 2025 includes 57 vulnerabilities, including two that Microsoft marked as “critical.” The remaining vulnerabilities listed are classified as “important.” Microsoft assessed that exploitation of the two “critical” vulnerabilities is “less likely.”Â
Microsoft today pushed updates to fix at least 56 security flaws in its Windows operating systems and supported software. This final Patch Tuesday of 2025 tackles one zero-day bug that is already being exploited, as well as two publicly disclosed vulnerabilities.
SAP has released its December security updates addressing 14 vulnerabilities across a range of products, including three critical-severity flaws. [...]
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
Ivanti warns users to address a newly disclosed Endpoint Manager vulnerability that could let attackers execute code remotely. Software firm Ivanti addressed a newly disclosed vulnerability, tracked as CVE-2025-10573 (CVSS score 9.6), in its Endpoint Manager (EPM) solution. The vulnerability is a St...
Identity management vendors like Okta see an opening to calm CISOs worried about agents running amok The fear of AI agents running amok has thus far halted the wide deployment of these digital workhorses, Okta's president of Auth0, Shiv Ramji, told The Register.…
Evan Tangeman became the ninth person to plead guilty as part of a wider Justice Department takedown of a criminal group known as the Social Engineering Enterprise.
The Shai‑Hulud 2.0 supply chain attack represents one of the most significant cloud-native ecosystem compromises observed recently. Attackers maliciously modified hundreds of publicly available packages, targeting developer environments, continuous integration and continuous delivery (CI/CD) pipelin...
Cybersecurity insurer Coalition said it will start covering certain incidents where AI and deepfakes lead to reputational harm. Â
The post Organizations can now buy cyber insurance that covers deepfakes appeared first on CyberScoop.