> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends:
1. Google is rolling out AI defenses for Android to combat messaging scams and fraudulent calls, aiming to enhance user security.
2. A new election influence campaign is leveraging hyperlocal content to manipulate AI chatbots, suggesting a future trend in political disinformation.
3. Zero-click spyware is being disseminated through targeted online ads, posing significant risks as it can infect devices without user interaction.
4. Cisco has issued a warning regarding an actively exploited vulnerability in its Secure Email Gateway, allowing remote attackers to execute commands with root privileges.
5. The Legal Aid Agency in the UK experienced a severe data breach, with records dating back to 1978 compromised, highlighting the long-term implications of such attacks.
6. Researchers also discovered fake CAPTCHA systems used to facilitate malware downloads, further illustrating the evolving tactics of cybercriminals.
7. Major vulnerabilities were reported in various platforms, including critical flaws in Palo Alto Networks' PAN-OS and Drupal, underscoring the urgent need for patches and updates.
|
// AI-powered summary generated at 20:01
A sprawling surveillance campaign targeting Google Chrome and Microsoft Edge users is just the latest evolution of a seven-year-long project to distribute malicious browser extensions.
By targeting trusted browser extensions and weaponizing them only after they had passed i...
Iran-linked threat actor MuddyWater targeted multiple Israeli sectors with a new MuddyViper backdoor in recent attacks. ESET researchers uncovered a new MuddyWater campaign targeting Israeli organizations and one confirmed Egyptian target. The Iran-linked APT group MuddyWater (aka SeedWorm, TEMP.Zag...
Borough says attackers copied 'historical' info as three-council cyber woes drag on Kensington and Chelsea Council has admitted that data was quietly lifted from its systems during last week's cyber meltdown, confirming that the outage was not just an IT faceplant but a bona fide data breach.âŠ
It was discovered that Django incorrectly handled certain characters in the
FilteredRelation object. An attacker could possibly use this issue to
execute arbitrary SQL commands. This issue only affected Ubuntu 20.04 LTS,
Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.04, and Ubuntu 25.10.
(CVE-2025-1...
Infected 4.3 million Chrome and Edge users via extensions; ShadyPanda exploited browser marketplaces
Cybercrime has fully shifted to a subscription model, with phishing kits, Telegram OTP bots, infostealer logs, and even RATs now rented like SaaS tools. Varonis explains how this "crime-as-a-service" economy lowers the barrier to entry and gives low-skill attackers on-demand access to advanced capab...
A joint investigation led by Mauro Eldritch, founder of BCA LTD, conducted together with threat-intel initiative NorthScan and ANY.RUN, a solution for interactive malware analysis and threat intelligence, has uncovered one of North Koreaâs most persistent infiltration schemes: a network of remote IT...
The supply chain campaign known as GlassWorm has once again reared its head, infiltrating both Microsoft Visual Studio Marketplace and Open VSX with 24 extensions impersonating popular developer tools and frameworks like Flutter, React, Tailwind, Vim, and Vue.
GlassWorm was first documented in Octob...
In an unprecedented intelligence operation, security researchers exposed how North Korean IT recruiters target and lure developers into renting their identities for illicit fundraising. [...]
Google has shipped patches for 51 Android vulnerabilities, including two high-severity flaws (CVE-2025-48633, CVE-2025-48572) that âmay be under limited, targeted exploitationâ. According to the December Android security bulletin, both vulnerabilities affect the Android Framework, which is a collect...
Google has released the December 2025 Android security bulletin, addressing 107 vulnerabilities, including two flaws actively exploited in targeted attacks. [...]
Forward Edge-AI announced two major milestones in advancing quantum-resistant communications: the United States Patent and Trademark Office (USPTO) has issued a Notice of Allowance for its patent application covering attack-resilient, trust-verified communications, and the company has delivered its...
When familiar security concepts carry unfamiliar meanings for different audiences, teams talk past each other without even realizing it. This silent disconnect weakens communication, clarity, and outcomes.
The post The Great Disconnect: Unmasking the âTwo Separate Conversationsâ in Security appeared...
With submissions showcasing advances in automation, inclusion, workforce development, and real-world resilience, this yearâs programme highlights the multifaceted role of todayâs CSO. As threats evolve and organizational complexity grows, the CSO is now a strategist, communica...
Malicious prompts rewritten as poems have been found to bypass AI guardrails. Which models resisted and which failed the poetic jailbreak test?
Cybersecurity researchers have disclosed details of an npm package that attempts to influence artificial intelligence (AI)-driven security scanners.
The package in question is eslint-plugin-unicorn-ts-2, which masquerades as a TypeScript extension of the popular ESLint plugin. It was uploaded to the...
Regulator says Illuminate ignored years of warnings, stored kids' data in plain text, and kept districts in the dark US edtech provider Illuminate Education just got dinged by the Federal Trade Commission for allegedly failing to keep an attacker from pilfering data on 10 million students.âŠ
USN-7855-1 introduced a regression in Unbound
An ongoing phishing campaign impersonates popular brands, such as Unilever, Disney, MasterCard, LVMH, and Uber, in Calendly-themed lures to steal Google Workspace and Facebook business account credentials. [...]
The extensions were seen profiling users, reading cookie data to create unique identifiers, and executing payloads with browser API access.
The post Chrome, Edge Extensions Caught Tracking Users, Creating Backdoors appeared first on SecurityWeek.