> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack on ConnectWise has compromised Microsoft 365 tenants, prompting immediate security measures. Drupal has patched significant remote code execution vulnerabilities, with warnings of potential exploit attempts. Additionally, various French industries and state operators are facing targeted cyberattacks, including DDoS and data exfiltration. The rise of AI-driven attacks is evident, with reports of unauthorized access to Indian organizations' data, while malicious npm packages like "imgdecode" are part of ongoing supply chain risks. Lastly, the U.S. CISA has added new vulnerabilities from Fortinet and BeyondTrust to its exploited catalog, emphasizing the need for heightened security vigilance across sectors.
|
// AI-powered summary generated at 16:01
When you spend half a million dollars in a single night at a nightclub, purchase exotic cars worth millions, and rent mansions under false names, you are risking drawing attention to yourself...
Read more in my article on the Hot for Security blog.
Four distinct threat activity clusters have been observed leveraging a malware loader known as CastleLoader, strengthening the previous assessment that the tool is offered to other threat actors under a malware-as-a-service (MaaS) model.
The threat actor behind CastleLoader has been assigned the nam...
Discover how Exterro Imager Pro redefines digital investigations with faster triage, seamless iOS collection, and on-the-fly decryption.
Cisco Talos has detected new tactics from a financially motivated actor using DeadLock ransomware
A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication with the attacker. [...]
In episode 80 of The AI Fix, your hosts look at DeepSeek 3.2 âSpecialeâ, the bargain-basement model that claims GPT-5-level brains at 10% of the price, Jensen Huangâs reassuring vision of a robot fashion industry, and a 75kg T-800 style humanoid that can do flying kicks because robot-marketing depar...
An initial access broker tracked as Storm-0249 is abusing endpoint detection and response solutions and trusted Microsoft Windows utilities to load malware, establish communication, and persistence in preparation for ransomware attacks. [...]
At a recent Tech Field Day Exclusive event, Microsoft unveiled a significant evolution of its security operations strategyâone that attempts to solve a problem plaguing security teams everywhere: the exhausting practice of jumping between multiple consoles just to understand a single attack. The Pr...
North Korean threat actors are believed to be behind CVE-2025-55182 exploitation delivering EtherRAT.
The post React2Shell Attacks Linked to North Korean Hackers appeared first on SecurityWeek.
Mirai-based Broadside botnet targets vulnerable TBK Vision DVRs, posing a potential threat to the maritime logistics sector, Cydome warns. Cydome researchers have identified a new Mirai botnet variant dubbed Broadside that is targeting the maritime logistics sector by exploiting the command injectio...
Have we learned nothing from sci-fi films and TV shows? Interview Imagine botnets in physical form and you've got a pretty good idea of what could go wrong with the influx of AI-infused humanoid robots expected to integrate into society over the next few decades.âŠ
Stablecoins have crossed the chasm from trading utility to live, programmable payment rails that settle value in minutes, 24/7/365, acrossâŠ
The post Why Do Stablecoins Matter for Banks? appeared first on Chainalysis.
srcset="https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2082667993.jpg?quality=50&strip=all 6173w, https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2082667993.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
Cyber investigators from the Seoul Metropolitan Police Agency seized devices and data from one of the country's largest tech firms to find evidence uncovering how the breach took place.
The funding round was led by KKR, with participation from Sixth Street Growth, TenEleven, and Carrick Capital Partners.
The post Identity Security Firm Saviynt Raises $700 Million at $3 Billion Valuation appeared first on SecurityWeek.
Secure by Design (la sécurité dÚs la conception).
Pieces0310 explains how proper forensic imaging and ISO/IEC 17025 standards protect the integrity of digital evidence.
TransUnion today added an ability to create digital fingerprints without relying on cookies that identify, in real time, risky devices and other hidden anomalies to its Device Risk service for combatting fraud. Clint Lowry, vice president of global fraud solutions at TransUnion, said these capabili...
Several security issues were fixed in radare2.
The threat actor known as Storm-0249 is likely shifting from its role as an initial access broker to adopt a combination of more advanced tactics like domain spoofing, DLL side-loading, and fileless PowerShell execution to facilitate ransomware attacks.
"These methods allow them to bypass defenses,...