> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack on ConnectWise has compromised Microsoft 365 tenants, prompting immediate security measures. Drupal has patched significant remote code execution vulnerabilities, with warnings of potential exploit attempts. Additionally, various French industries and state operators are facing targeted cyberattacks, including DDoS and data exfiltration. The rise of AI-driven attacks is evident, with reports of unauthorized access to Indian organizations' data, while malicious npm packages like "imgdecode" are part of ongoing supply chain risks. Lastly, the U.S. CISA has added new vulnerabilities from Fortinet and BeyondTrust to its exploited catalog, emphasizing the need for heightened security vigilance across sectors.
|
// AI-powered summary generated at 16:01
The UK’s National Cyber Security Centre has warned of the dangers of comparing prompt injection to SQL injection
Zero Trust helps organizations shrink their attack surface and respond to threats faster, but many still struggle to implement it because their security tools don’t share signals reliably. 88% of organizations admit they’ve suffered significant challenges in trying to implement such approaches, acco...
Google on Monday announced a set of new security features in Chrome, following the company's addition of agentic artificial intelligence (AI) capabilities to the web browser.
To that end, the tech giant said it has implemented layered defenses to make it harder for bad actors to exploit indirect pro...
The Italian startup will use the investment to build proprietary AI models, accelerate global expansion, and hire new talent.
The post Equixly Raises $11 Million for AI-Powered API Penetration Testing appeared first on SecurityWeek.
Cisco Talos has uncovered a new DeadLock ransomware campaign using a previously unknown BYOVD loader to exploit a Baidu Antivirus driver vulnerability, letting threat actors disable EDR defenses and escalate attacks.
SYTECH’s Daren Greener urges stronger investment in digital forensics to spot the earliest signs of stalking and stop gateway crimes before they escalate.
As Portugal gives researchers a pass under cybersecurity law Portugal has become the latest country to carve out protections for researchers under its cybersecurity law.…
Poland arrested three Ukrainian nationals accused of using hacking devices to target IT systems and obtain sensitive defense-related data. Polish police arrested three Ukrainian nationals for allegedly trying to damage IT systems and obtaining sensitive defense-related data using advanced hacking eq...
Is your organization’s senior leadership vulnerable to a cyber-harpooning? Learn how to keep them safe.
Vitas, the largest for-profit hospice chain in the United States, discovered a cybersecurity intrusion in October.
The post Over 300,000 Individuals Impacted by Vitas Hospice Data Breach appeared first on SecurityWeek.
Canadian organizations have emerged as the focus of a targeted cyber campaign orchestrated by a threat activity cluster known as STAC6565.
Cybersecurity company Sophos said it investigated almost 40 intrusions linked to the threat actor between February 2024 and August 2025. The campaign is assessed...
We break down a new infostealer attack that combines the ClickFix technique with a shared chat containing malicious user guides on the official ChatGPT website.
Officials insist OBR relied on 'early estimate' and real figure won't emerge until next year The head of the department delivering the UK government's digital identity scheme has rejected the ÂŁ1.8 billion cost forecast by the Office for Budget Responsibility (OBR), but is not willing to provide an a...
Gartner has called for organizations to block today’s AI browsers on security concerns
Depuis 2021, Apple prévient certaines cibles d’opérations de surveillance sophistiquées. Le CERT-FR vient de lancer une recherche auprés de français impactés....
Ce tutoriel pas à pas explique comment installer OpenLDAP sur Linux pour créer un annuaire LDAP sur un serveur Debian ou Red Hat.
Le post Installer votre annuaire OpenLDAP sur Linux (Red Hat 9 / Debian 13) a été publié sur IT-Connect.
Ce tutoriel explique comment bien configurer un annuaire OpenLDAP sur Linux, avec l'importation des schémas et la création des OU, des groupes et utilisateurs.
Le post Configurer OpenLDAP sur Linux (Red Hat 9 / Debian 13) : préparer l’annuaire LDAP a été publié sur IT-Connect.
Police raid Coupang over massive data breach South Korean police raided Coupang’s headquarters in Seoul after the company disclosed a massive breach that exposed personal information for roughly 33.7 million customers, including names, phone numbers, email addresses, and delivery details. Investigat...
srcset="https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2290639589.jpg?quality=50&strip=all 6240w, https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2290639589.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
Cybersecurity researchers have discovered two new extensions on Microsoft Visual Studio Code (VS Code) Marketplace that are designed to infect developer machines with stealer malware.
The VS Code extensions masquerade as a premium dark theme and an artificial intelligence (AI)-powered coding assista...