> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
Google has agreed to pay $8.25 million to settle a class-action lawsuit centered on claims that it habitually and illegally collected data from devices belonging to children under age 13.
We can no longer say that artificial intelligence is a "future risk", lurking somewhere on a speculative threat horizon. The truth is that it is a fast-growing cybersecurity risk that organizations are facing today.
That's not just my opinion, that's also the message that comes loud and clear fro...
Ce tutoriel explique comment installer FossFLOW en local (self-hosted) pour créer des diagrammes isométriques 3D directement dans votre navigateur Web.
Le post Découverte de FossFLOW : une solution locale pour créer des diagrammes isométriques 3D a été publié sur IT-Connect.
2025 Threat Landscape in Review: Lessons for Businesses Moving Into 2026
andrew.gertz@t…
Thu, 01/15/2026 - 16:48
Nadav Avital | Senior Director of Threat Research at Thales
More About This Author >
2025 was a year that tested how businesses think about security. Some atta...
The CSA Alliance has released their annual report on AI and security. Alan, Anton Chuvakin and Hillary Baron discuss the state of AI security and governance, how companies are actually adopting AI (both agentic and generative) and most importantly how organizations are integrating it into their bus...
CISA, NCSC and the FBI have released a new security guide to enhance protection for OT environments
A look into how Kasada approaches verifying AI bots, managing access, and giving security teams control as AI traffic grows.
The post AI, agents, and the trust gap appeared first on Security Boulevard.
Shahar Tal, CEO and co-founder of Cyata, discusses how the company is building the control plane for agentic identity. With deep roots in Israel’s Unit 8200 and Check Point, Cyata is tackling one of the next big security challenges: governing, securing and managing identities in an agent-driven AI...
A critical vulnerability in Google's Fast Pair protocol can allow attackers to hijack Bluetooth audio accessories like wireless headphones and earbuds, track users, and eavesdrop on their conversations. [...]
A critical vulnerability in Google's Fast Pair protocol can allow attackers to hijack Bluetooth audio accessories like wireless headphones and earbuds, track users, and eavesdrop on their conversations. [...]
Session 8D: Usability Meets Privacy
Authors, Creators & Presenters: Jingwen Yan (Clemson University), Song Liao (Texas Tech University), Mohammed Aldeen (Clemson University), Luyi Xing (Indiana University Bloomington), Danfeng (Daphne) Yao (Virginia Tech), Long Cheng (Clemson University)
PAPER...
Germany and Israel have signed a cyber and security cooperation agreement — a deal that Berlin hopes will lead to its own version of Israel’s so-called “cyber dome.”
While ‘traditional’ ransomware attacks remain stable, some gangs are shifting towards exploiting zero-days and supply chains to go straight to stealing data
New York, United States, 15th January 2026, CyberNewsWire
The post BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications appeared first on Security Boulevard.
Carol Brooks, a cyber and organisational psychologist, joins the Forensic Focus Podcast to discuss her PhD research into covert cyber investigators and the psychological factors that shape their resilience and investigative decision-making.
A maximum-severity security flaw in a WordPress plugin called Modular DS has come under active exploitation in the wild, according to Patchstack.
The vulnerability, tracked as CVE-2026-23550 (CVSS score: 10.0), has been described as a case of unauthenticated privilege escalation impacting all versio...
The recently disclosed ServiceNow vulnerability should terrify every CISO in America. CVE-2025-12420, dubbed “BodySnatcher,” represents everything wrong with how we’re deploying AI in the enterprise today. An unauthenticated attacker—someone who has never logged into your system, sitting anywhere i...
TL;DR Iran’s crypto ecosystem reached over $7.78 billion in 2025, having grown at a faster pace for most of the…
The post Inside Iran’s Growing $7.8 Billion Crypto Ecosystem: IRGC Dominance and a Flight to Bitcoin Reflect Geopolitical Tensions and Domestic Unrest appeared first on Chainalysis.
A cyberattack on Central Maine Healthcare exposed the personal, medical, and insurance data of about 145,000 patients. Central Maine Healthcare notified patients affected by a data security incident. The organization detected unusual activity on June 1, 2025, secured its systems, and launched an inv...
Cybersecurity researchers have disclosed details of a new attack method dubbed Reprompt that could allow bad actors to exfiltrate sensitive data from artificial intelligence (AI) chatbots like Microsoft Copilot in a single click, while bypassing enterprise security controls entirely.
"Only a single...