> TODAY'S SUMMARY (317 articles)
Today's cybersecurity landscape features several critical updates and ongoing threats. Notably, a zero-day vulnerability in BeyondTrust's software has been exploited by a suspected Chinese espionage group, raising alarm for organizations utilizing remote support tools. In addition, Burger King Japan reported a significant data breach affecting over 11 million customers, highlighting the growing risk of cyberattacks on large corporations. The rise of ransomware gangs employing threats of physical violence for extortion is increasingly concerning, as reported in a new study. Furthermore, multiple vulnerabilities have been discovered across various systems, including critical RCE flaws in Microsoft Office and Google Chrome, necessitating immediate patching. Lastly, AI models continue to pose risks, with researchers warning about the potential misuse of data during their training processes.
|
// AI-powered summary generated at 20:01
La virtualisation constitue l’un des piliers de l’informatique moderne, mais elle n’est pas sans défis de sécurité. Le premier problème : le nombre d’instances de serveurs virtualisés (machines virtuelles, ou VM) que les administrateurs doivent désormais défendre....
Last week, there were disclosed in and that have been added to the Wordfence Intelligence Vulnerability Database, and there were that contributed to WordPress Security last week. Review those vulnerabilities in this report now to ensure your site is not affected. Our mission with Wordfence Intellige...
Security and developer teams are scrambling to address a highly critical security flaw in frameworks tied to the popular React JavaScript library. Not only is the vulnerability, which also is in the Next.js framework, easy to exploit, but React is widely used, including in 39% of cloud environments...
ASUS confirms a third-party breach after Everest leaks sample data. Hackers also claim ArcSoft and Qualcomm. ASUS says a third-party breach exposed data after Everest ransomware leaked samples, claiming they have hacked ASUS, ArcSoft, and Qualcomm. ASUS says a supplier breach exposed some phone came...
Established in 2024 by Cybereason co-founders Lior Div and Yonatan Striem-Amit, the company has raised a total of $166 million in funding.
The post Agentic Security Firm 7AI Raises $130 Million appeared first on SecurityWeek.
A maximum severity vulnerability, dubbed 'React2Shell', in the React Server Components (RSC) 'Flight' protocol allows remote code execution without authentication in React and Next.js applications. [...]
OT environments rely on aging systems, shared accounts, and remote access, making weak or reused passwords a major attack vector. Specops Software explains how stronger password policies and continuous checks for compromised credentials help secure critical OT infrastructure. [...]
Hackers stole the names, addresses, Social Security numbers, and financial and medical information of 9,542 people.
The post Inotiv Says Personal Information Stolen in Ransomware Attack appeared first on SecurityWeek.
Silent Patch Tuesday mitigation ends ability to hide malicious commands in .lnk files Microsoft has quietly closed off a critical Windows shortcut file bug long abused by espionage and cybercrime networks.…
UK’s NCSC and Canada’s CCCS release a joint report on content provenance, urging organizations to strengthen digital trust and combat AI-driven misinformation
A malicious Rust crate (package) named evm-units, aimed at stealing cryptocurrency from unsuspecting developers, has been pulled from the official public package registry for the Rust programming language, but not before having been downloaded 7257 times. Another package (uniswap-utils) by the same...
A longstanding problem with the way Windows handles LNK shortcut files, which attackers have been abusing for years to hide malicious commands in plain sight, may finally have been fixed, with more than one patch now available to users.
The problem was that threat actors co...
The six-pillar document covers a lot of ground in a short space, and could be followed by an executive order implementing it, according to sources familiar with the draft.
The post Five-page draft Trump administration cyber strategy targeted for January release appeared first on CyberScoop.
Fintech firm Marquis notifies affected business after ransomware breach Texas based fintech firm Marquis is notifying U.S. banks and credit unions after a ransomware attack in August allowed an intruder to exploit a SonicWall firewall vulnerability and access internal files. Regulatory filings say t...
Information published.
Information published.
SpecterOps and Tines announced a strategic partnership that brings native BloodHound integration to Tines, enabling customers to operationalize Attack Path Management through automated, AI-assisted workflows. This partnership combines SpecterOps’ identity Attack Path Management capabilities with Tin...
Information published.
Information published.
The GhostFrame phishing framework, using stealthy iframes, was linked to over 1 million attacks