> TODAY'S SUMMARY (6 articles)
Today's cybersecurity news highlights several critical developments. The ad industry is increasingly becoming a conduit for mercenary spyware, enabling data collection without user interaction. Additionally, concerns are rising around AI security, with reports indicating that TypeSafe's Jev model may be even more vulnerable to attacks than traditional large language models (LLMs). Meanwhile, the Fastfetch tool has undergone updates affecting how disk space is reported, possibly impacting system diagnostics. As AI continues to evolve, experts stress the importance of controlling its capabilities to mitigate risks effectively. Lastly, the cybersecurity community mourns the loss of Barry Steinhardt, a prominent advocate for digital privacy.
|
// AI-powered summary generated at 04:00
A teenage cybercriminal posts a smug screenshot to mock a sextortion scammer... and accidentally hands over the keys to his real-world identity. Meanwhile, we look into the crystal ball for 2026 and consider how stolen data is now the jet fuel of cybercrime – and how next year could be even nastier...
Developers using the React 19 library for building application interfaces are urged to immediately upgrade to the latest version because of a critical vulnerability that can be easily exploited by an attacker to remotely run their own code.
Researchers at Wiz said Wednesday...
The following vulnerabilities have been discovered in the WebKitGTK web engine: CVE-2025-43392 Tom Van Goethem discovered that a website may exfiltrate image data cross-origin.
Axon Enterprise Inc. is working with a Canadian police department to test the addition of face recognition technology (FRT) to its body-worn cameras (BWCs). This is an alarming development in government surveillance that should put communities everywhere on alert.Â
As many as 50 officers from the E...
* Exécution de code arbitraire à distance * react-server-dom-webpack versions 19.0.x antérieures à 19.0.1, versions 19.1.x antérieures à 19.1.2 et versions 19.2.x antérieures à 19.2.1 * react-server-dom-parcel versions 19.0.x antérieures à 19.0.1, versions 19.1.x antérieures à 19.1.2 et versions...
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et une atteinte à la confidentialité des données.
Learn more about the CVE-2025-55182 vulnerability affecting React Server Components and affecting Next.js.
De multiples vulnérabilités ont été découvertes dans Wireshark. Elles permettent à un attaquant de provoquer un déni de service à distance.
De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaquant de provoquer un déni de service à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Modern IT departments are wrestling with a sprawling array of automation and operations tools, often numbering in the dozens or even hundreds. This complexity makes efficient management and integration a significant obstacle, especially as organizations accelerate their investment in hybrid IT ecosy...
Une vulnérabilité a été découverte dans PostgreSQL PgBouncer. Elle permet à un attaquant de provoquer une injection SQL (SQLi).
Red Hat is excited to announce the release of Red Hat OpenShift sandboxed containers 1.11 and Red Hat build of Trustee 1.0, marking a significant milestone in our confidential computing journey. These releases bring production-grade support for confidential containers in Microsoft Azure Red Hat Open...
The Center for Internet Security® (CIS®) has officially published guidance for hardening Red Hat OpenShift Virtualization.The official publication of the new CIS Benchmark® for Red Hat OpenShift Virtualization is an important development for organizations running traditional virtual machines (VMs) a...
PES Energize, une entreprise de services publics à Pulaski, dans le Tennessee, a subi une attaque de cybersécurité qui a désactivé les téléphones et les systèmes informatiques. L'entreprise travaille avec des agences fédérales pour résoudre le problème. Les clients sont invités à utiliser des canaux...
IT teams are stuck between wanting to implement AI solutions across their organizations and dealing with the messy reality of increasingly complex infrastructure. Many are attempting to build their own automation solutions, cobbling together a patchwork of tools that, while well-intentioned, can act...
Twenty-eight percent of businesses surveyed in the recent SP Global Market Intelligence 451 Research report, “The value of a unified automation platform,” responded that their company uses 50-100+ tools that don’t seamlessly integrate. This widespread adoption of disparate solutions, often driven by...
Garten Services, Inc. experienced a data security incident in August 2025, where some personal information may have been accessed or acquired without authorization. The incident was discovered on December 4, 2025. The affected data included various personal information elements.
Hunneman experienced a data security incident on December 4, 2025, where unauthorized access to certain systems occurred, potentially impacting personal information. The incident may have included names and Social Security numbers. A cyberattack was claimed by Interlock on December 31.
Muneeb and Sohaib Akhter previously pleaded guilty to hacking into the State Department and other cybercrimes in 2015.
The post Twins with hacking history charged in insider data breach affecting multiple federal agencies appeared first on CyberScoop.
An unauthorized individual accessed the network without authorization between November 26 and December 4, 2025, and took copies of certain files. The files may have contained names along with Social Security numbers and/or driver’s license numbers. The incident was discovered on February 4, 2026.