> TODAY'S SUMMARY (6 articles)
Today's cybersecurity news highlights several critical developments. The ad industry is increasingly becoming a conduit for mercenary spyware, enabling data collection without user interaction. Additionally, concerns are rising around AI security, with reports indicating that TypeSafe's Jev model may be even more vulnerable to attacks than traditional large language models (LLMs). Meanwhile, the Fastfetch tool has undergone updates affecting how disk space is reported, possibly impacting system diagnostics. As AI continues to evolve, experts stress the importance of controlling its capabilities to mitigate risks effectively. Lastly, the cybersecurity community mourns the loss of Barry Steinhardt, a prominent advocate for digital privacy.
|
// AI-powered summary generated at 04:00
SpecterOps and Tines announced a strategic partnership that brings native BloodHound integration to Tines, enabling customers to operationalize Attack Path Management through automated, AI-assisted workflows. This partnership combines SpecterOps’ identity Attack Path Management capabilities with Tin...
The GhostFrame phishing framework, using stealthy iframes, was linked to over 1 million attacks
Zenity expanded its AI security platform with incident-correlation intelligence, broader agentic browser coverage, and a new open-source tool for testing emerging LLM manipulation techniques. As organizations adopt AI agents, AI assistants and agentic browsers at scale, security teams face increasin...
Chainalysis is excited to announce expanded pricing support through CoinGecko, one of the industry’s most comprehensive digital asset data providers.…
The post Chainalysis Integrated with CoinGecko for Improved and Additional Pricing Support appeared first on Chainalysis.
srcset="https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2617671109.jpg?quality=50&strip=all 5150w, https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2617671109.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
The state-sponsored hackers relied on phishing emails to deliver a malicious payload to Reporters Without Borders (RSF).
The post Reporters Without Borders Targeted by Russian Hackers appeared first on SecurityWeek.
L'éditeur Teclib a publié de nouvelles versions de GLPI pour combler plusieurs failles de sécurité via GLPI 11.0.4 et GLPI 10.0.22. Voici les CVE patchées.
Le post GLPI 11.0.4 et GLPI 10.0.22 : deux mises à jour de sécurité à appliquer maintenant ! a été publié sur IT-Connect.
Amazon Web Services (AWS) this week made an AWS Security Hub for analyzing cybersecurity data in near real time generally available, while at the same time extending the GuardDuty threat detection capabilities it provides to the Amazon Elastic Compute Cloud (Amazon EC2) and Amazon Elastic Container...
Austin, TX, USA, 4th December 2025, CyberNewsWire
The post SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware appeared first on Security Boulevard.
Register now to see how S21 VisionX automates CSAM descriptions and detects deepfakes instantly, helping investigators work faster and more safely.
Britain sanctioned Russia's GRU in its entirety for the first time, as well as several individuals, after a public inquiry concluded it was responsible for a deadly nerve agent attack in 2018.
Darktrace announced a series of enhancements to Darktrace / EMAIL designed to detect and stop attacks spanning communications channels, strengthen outbound email protections, and streamline SOC integrations. The new capabilities will help security teams catch sophisticated attacks that evade existin...
Coro announced the latest release of its unified platform. Coro 3.7 introduces user interface enhancements designed to accelerate remediation and streamline security management for SMBs. Coro has further refined its Actionboard, equipping IT professionals with essential information while minimizing...
Facial recognition software has long been criticized for accuracy issues and past wrongful arrests.
Facial recognition software has long been criticized for accuracy issues and past wrongful arrests.
The 25-page document outlines four principles for securely integrating AI with operational technology.
The post Global Cyber Agencies Issue AI Security Guidance for Critical Infrastructure OT appeared first on SecurityWeek.
​Microsoft is investigating and working to resolve a known issue that prevents customers from downloading Microsoft 365 desktop apps from the Microsoft 365 homepage. [...]
A threat group dubbed ShadyPanda exploited traditional extension processes in browser marketplaces by uploading legitimate extensions and then quietly weaponization them with malicious updates, infecting 4.3 million Chrome and Edge users with RCE malware and spyware.
The post ShadyPanda’s Years-Lon...
Cloudflare data shows 29.7 Tbps record-breaker landed amid 87% surge in network-layer attacks The internet has spent the past three months ducking for cover as the Aisuru botnet hurled record-shattering DDoS barrages from an army of up to 4 million infected machines.…
La vulnérabilité React2Shell est une menace sérieuse : elle permet une exécution de code à distance sans authentification. En première ligne : React et Next.js.
Le post La faille React2Shell dans React et Next.js menace les serveurs du monde entier : patchez maintenant ! a été publié sur IT-Connect.