> TODAY'S SUMMARY (14 articles)
Today's cyber news highlights several significant threats and trends. A coordinated operation has targeted phishing kits, leading to domain seizures and legal action. Cybercriminals are increasingly attacking physical systems, emphasizing the need for enhanced security in building management. The MALFEX campaign has introduced a malicious npm package, "imgdecode," that contains a shellcode loader, further demonstrating the risks in software supply chains. Additionally, suspicious notifications have been reported on platforms like Leboncoin and Vinted, with links to malicious casinos. The U.S. CISA has added multiple vulnerabilities, including those related to Fortinet and BeyondTrust, to its known exploited catalog. Finally, AI agents are reportedly accessing sensitive data in Indian organizations, raising concerns about the use of offensive AI in cyberattacks.
|
// AI-powered summary generated at 12:00
Google Chrome is introducing a new security architecture designed to protect upcoming agentic AI browsing features powered by Gemini. [...]
AI browsers including Perplexity Comet and OpenAI’s ChatGPT Atlas present security risks that cannot be adequately mitigated, and enterprises should prevent employees using them, according to Gartner.
“Gartner strongly recommends that organizations block all AI browsers for...
Posted by Nathan Parker, Chrome security team
Chrome has been advancing the web’s security for well over 15 years, and we’re committed to meeting new challenges and opportunities with AI. Billions of people trust Chrome to keep them safe by default, and this is a responsibility we take seriously....
Chrome’s new agentic browsing protections include user alignment critic, expanded origin-isolation capabilities, and user confirmations.
The post Google Fortifies Chrome Agentic AI Against Indirect Prompt Injection Attacks appeared first on SecurityWeek.
The comments echo many in the research community who have said the flaw is an inherent trait of generative AI technology.
The post UK cyber agency warns LLMs will always be vulnerable to prompt injection appeared first on CyberScoop.
Cybersecurity researchers are calling attention to a new campaign dubbed JS#SMUGGLER that has been observed leveraging compromised websites as a distribution vector for a remote access trojan named NetSupport RAT.
The attack chain, analyzed by Securonix, involves three main moving parts: An obfuscat...
The ban on Roblox has drawn a sharp backlash from the platform’s roughly 18 million monthly Russian users — mostly children and teenagers — who have launched social-media campaigns and video petitions urging officials to restore access.
To bolster security for our customers, we need to align with our ecosystem partners. Our new collaboration with Beazley as an incident response partner is a step in that direction.
The post Stronger together: New Beazley collaboration enhances cyber resilience appeared first on Microsoft Security Bl...
Ce tutoriel explique comment exposer le socket Docker à un conteneur de façon sécurisée avec un Docker Socket Proxy qui va filtrer les accès sur l'API Docker.
Le post Docker : comment améliorer la sécurité avec un Docker Socket Proxy ? a été publié sur IT-Connect.
Petco said the exposure was due to an error in an application, and that it is notifying victims’ whose data was affected.
ESET Password Manager sales have ended, and your saved data will be deleted after Oct 18, 2027. Learn how this affects your subscription and what to do next.
A new version of ClayRat Android spyware features enhanced surveillance and device-control features
Researchers have confirmed more than 30 affected organizations tied to the React2Shell bug that emerged last week.
It’s nearly the end of 2025, and half of the US and the UK now require you to upload your ID or scan your face to watch “sexual content.” A handful of states and Australia now have various requirements to verify your age before you can create a social media account.
Age-verification laws may sound s...
A data breach at Marquis Software Solutions due to a firewall flaw has affected over 780,000 people across the US
The compromise legislation has other cyber provisions besides on commercial spyware, joint NSA-Cyber Command leadership and streamlining regulations.
The post Defense bill addresses secure phones, AI training, cyber troop mental health appeared first on CyberScoop.
Several security issues were fixed in WebKitGTK.
We found a campaign that hosts fake login pages on Cloudflare Pages and sends the stolen info straight to Telegram.
Cary, North Carolina, USA, 8th December 2025, CyberNewsWire
The post INE Earns G2 Winter 2026 Badges Across Global Markets appeared first on Security Boulevard.
Picus Security explains why relying on LLM-generated attack scripts is risky and how an agentic approach maps real threat intel to safe, validated TTPs. Their breakdown shows how teams can turn headline threats into reliable defense checks without unsafe automation. [...]