> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape is marked by several critical threats and trends. Recently patched vulnerabilities in Barracuda devices are being actively exploited, allowing attackers root access. Cisco's BroadWorks and Openwave flaws are also under attack despite available patches. Apple has addressed Bluetooth and AirPlay vulnerabilities, reinforcing the need for prompt patching as 45% of EU IT service providers delay critical updates. New malware threatens Exchange servers, and leaked exploit kits are compromising iPhones via ads. Additionally, Microsoft released a substantial patch update addressing 1,094 vulnerabilities, including a critical zero-day in Outlook that risks credential theft. Cybersecurity resilience remains a priority as organizations grapple with the rising tide of AI-discovered vulnerabilities.
|
// AI-powered summary generated at 08:00
APT28 was seen impersonating popular webmail and VPN services, including Microsoft OWA, Google, and Sophos VPN portals.
The post Russia’s APT28 Targeting Energy Research, Defense Collaboration Entities appeared first on SecurityWeek.
Tech minister Liz Kendall says the government will back a robust regulatory response Ofcom is investigating X over potential violations of the Online Safety Act, Britian's comms watchdog has confirmed.…
Europol announced the arrest of 34 suspected Black Axe members in Spain during a joint operation with Spanish and European law enforcement. Europol announced the arrest of 34 suspects in Spain linked to the Black Axe criminal network, following a joint operation by Spanish police, Bavarian authoriti...
Fascinating research:
Weird Generalization and Inductive Backdoors: New Ways to Corrupt LLMs.
AbstractLLMs are useful because they generalize so well. But can you have too much of a good thing? We show that a small amount of finetuning in narrow contexts can dramatically shift behavior outside those...
Everest revendique 1 088 Go volés chez Chrysler et menace de publier sous 6 à 7 jours, avec données clients et internes....
Threat actors are hunting for misconfigured proxy servers to gain access to APIs for various LLMs.
The post LLMs in Attacker Crosshairs, Warns Threat Intel Firm appeared first on SecurityWeek.
Threat actors were spotted weaponizing the n8n automation ecosystem this week, slipping malicious npm packages into its marketplace of community-maintained nodes.
The deceptive packages, disguised as legitimate integrations like Google Ads connectors, lured developers into...
Python could be made to crash if it received specially crafted network traffic.
Des fuites de données santé alimentent un hameçonnage crédible usurpant l’Assurance Maladie, analysé et décortiqué par ZATAZ....
News of a possible Instagram data breach spread over the weekend after Malwarebytes reported that cybercriminals had stolen sensitive information from 17.5 million Instagram accounts, potentially leading to a surge in password reset requests. Users have been complaining last week about receiving rep...
Healthcare teams are evaluating a range of AI tools for workflows tied to coverage, coding, care coordination, and trials. Anthropic announced expanded healthcare and life sciences offerings for its Claude model with a set of connectors, task skills, and consumer health record integrations that it p...
As organizations worldwide recalibrate their operations in the wake of unprecedented change, remote work has emerged not simply as a fleeting trend but as a mainstay of modern business. For compliance experts and leaders alike, this shift has introduced a complex interplay of governance, risk manage...
A new wave of GoBruteforcer attacks has targeted databases of cryptocurrency and blockchain projects to co-opt them into a botnet that's capable of brute-forcing user passwords for services such as FTP, MySQL, PostgreSQL, and phpMyAdmin on Linux servers.
"The current wave of campaigns is driven by t...
The record-breaking deal has already received a green light from the US government.
The post EU Sets February Deadline for Verdict on Google’s $32B Wiz Acquisition appeared first on SecurityWeek.
Opposition leader Kemi Badenoch pitches age limits and classroom curbs as fixes for behavior and mental health The Tories have pledged to kick under-16s off social media, betting that banning teens from TikTok and Instagram will fix what they see as a growing crisis in kids' mental health and classr...
The Spanish National Police (PolicĂa Nacional), working closely with the Bavarian State Criminal Police Office (Bayerisches Landeskriminalamt) and with support from Europol, has carried out an operation targeting the international criminal organization known as Black Axe. Black Axe is a highly struc...
TRM Labs says illegal crypto flows into digital wallets increased to $158bn in 2025
For the latest discoveries in cyber research for the week of 12th January, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Manage My Health, New Zealand’s largest patient portal, has acknowledged a cyberattack occurred on December 2025, that potentially exposed data of nea...
Deux rapports récents de l'ENISA contiennent des erreurs laissant entendre qu'il s'agit d'hallucinations de la part d'une IA : des erreurs gênantes.
Le post Cyber en Europe – ENISA : des sources inventées par l’IA découvertes dans ses rapports officiels a été publié sur IT-Connect.
Several security issues were fixed in PHP.