> TODAY'S SUMMARY (68 articles)
Today's cybersecurity news highlights several critical threats and trends. Microsoft has issued a significant Patch Tuesday update, addressing 1,094 vulnerabilities, including a zero-day flaw in Outlook that could expose hashed NTLM credentials. Additionally, hackers are actively exploiting high-severity vulnerabilities in Cisco BroadWorks and Openwave systems, emphasizing the urgency for organizations to patch these flaws. New AI-related threats are emerging, with Microsoft researchers demonstrating how hidden backdoors can be implanted in AI models. Meanwhile, a new tool advertised by hackers claims to maintain Gmail access post-password resets, raising concerns over credential security. Lastly, the SANS Institute reports that incidents in operational technology (OT) environments are on the rise, with one-third of industrial organizations affected.
|
// AI-powered summary generated at 12:00
Delinea has signed a definitive agreement to acquire StrongDM. Delinea’s leadership in enterprise privileged access management (PAM), combined with StrongDM’s just-in-time (JIT) runtime authorization capabilities and developer-first access model, will form a new class of identity security platform d...
The startup will use the investment to accelerate R&D, expand go-to-market efforts, and hire new talent.
The post Depthfirst Raises $40 Million for Vulnerability Management appeared first on SecurityWeek.
Tines unveiled AI in Tines, a unified interaction layer for agents, copilots, and MCPs, enabling organizations to operationalize enterprise AI in a governed environment. While AI adoption is accelerating, the resulting value remains inconsistent. According to IDC, 88% of AI proof-of-concepts never m...
CVE-2026-0227 : une nouvelle faille de sécurité importante a été corrigée dans PAN-OS, le système des firewalls Palo Alto. Quels sont les risques ?
Le post Palo Alto Networks – CVE-2026-0227 : cette nouvelle faille permet de désactiver le firewall à distance a été publié sur IT-Connect.
Smart Driver pitched as safety app, but feds claim it's a data-harvesting scheme that jacked up premiums The Federal Trade Commission has banned General Motors and subsidiary OnStar from sharing drivers' precise location and behavior data with consumer reporting agencies for five years under a 20-ye...
Suspect assisting West Midlands Police over alleged theft at Walsall GP practice The UK's West Midlands Police has released a woman on bail as part of an investigation into a data breach at a Walsall general practitioner's (GP) surgery.…
Researchers uncovered a way to steal data from Microsoft Copilot users with a single malicious link.
A critical vulnerability (CVE-2025-64155) in Fortinet’s FortiSIEM security platform has now been accompanied by publicly released proof-of-concept (PoC) exploit code, raising the urgency for organizations to patch immediately. About CVE-2025-64155 CVE-2025-64155 may allow unauthenticated, remote att...
isVerified provides Android and iOS mobile applications designed to protect enterprise communications.
The post isVerified Emerges From Stealth With Voice Deepfake Detection Apps appeared first on SecurityWeek.
The longtime cybersecurity professional says she’s taking the helm of the legacy security organization at “an inflection point” for tech and the world beyond.
Delinea announces the acquisition of StrongDM to enhance its privileged access management platform, offering just-in-time access for IT infrastructure and improving cybersecurity for human and non-human identities.
The post Delinea Acquries StrongDM to Secure Access to IT Infrastructure appeared fi...
API security is becoming more important by the day and skilled practitioners are in high demand. Now’s the time to level up your API security skillset. Wallarm University, our free training course, provides security analysts, engineers, and practitioners with hands-on skills you can’t get from docu...
Microsoft disrupts massive RedVDS cybercrime virtual desktop service Microsoft announced on Wednesday that it disrupted RedVDS, a massive cybercrime platform linked to at least $40 million in reported losses in the United States alone since March 2025. Microsoft filed civil lawsuits in the United St...
ISACA’s State of Privacy 2026 report reveals that data privacy teams remain understaffed and underfunded, despite growing regulatory demands and rising technical privacy challenges
The attack bypassed Copilot’s data leak protections and allowed for session exfiltration even after the Copilot chat was closed.
The post New ‘Reprompt’ Attack Silently Siphons Microsoft Copilot Data appeared first on SecurityWeek.
This isn’t good:
We discovered a critical vulnerability (CVE-2026-21858, CVSS 10.0) in n8n that enables attackers to take over locally deployed instances, impacting an estimated 100,000 servers globally. No official workarounds are available for this vulnerability. Users should upgrade to version 1....
Digital devices now shape daily instruction in K–12 classrooms. Laptops, tablets, and phones support research, collaboration in the classroom, and blended learning. Many schools also cater for bring your own device (BYOD) environments. These tools can unlock engagement and creativity, but they also...
Flaws in how 17 models of headphones and speakers use Google’s one-tap Fast Pair Bluetooth protocol have left devices open to eavesdroppers and stalkers.
srcset="https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_2121877784.jpg?quality=50&strip=all 2768w, https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_2121877784.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
As AI copilots and assistants become embedded in daily work, security teams are still focused on protecting the models themselves. But recent incidents suggest the bigger risk lies elsewhere: in the workflows that surround those models.
Two Chrome extensions posing as AI helpers were recently caught...