> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape is marked by several critical threats and trends. Recently patched vulnerabilities in Barracuda devices are being actively exploited, allowing attackers root access. Cisco's BroadWorks and Openwave flaws are also under attack despite available patches. Apple has addressed Bluetooth and AirPlay vulnerabilities, reinforcing the need for prompt patching as 45% of EU IT service providers delay critical updates. New malware threatens Exchange servers, and leaked exploit kits are compromising iPhones via ads. Additionally, Microsoft released a substantial patch update addressing 1,094 vulnerabilities, including a critical zero-day in Outlook that risks credential theft. Cybersecurity resilience remains a priority as organizations grapple with the rising tide of AI-discovered vulnerabilities.
|
// AI-powered summary generated at 08:00
Kosiba, a veteran of the Intelligence Community with over 30 years of federal service, returns to the agency as its most senior civilian leader.
The post Tim Kosiba Named NSA Deputy Director appeared first on SecurityWeek.
Click rate misses the real email security risk: what attackers can do after they access a mailbox. Material Security explains why containment and post-compromise impact matter more than phishing metrics. [...]
New lcms2 packages are available for Slackware 15.0 and -current to fix a security issue.
The North Korean state-sponsored espionage group Kimsuky has targeted government organizations, think tanks, and academic institutions.
The post FBI: North Korean Spear-Phishing Attacks Use Malicious QR Codes appeared first on SecurityWeek.
Tim Kosiba, who has a long history of national security positions at the NSA and elsewhere, will be the signals intelligence agency's new deputy chief.
Tenable has released PoC code and technical details after the vendor announced the availability of patches for three vulnerabilities.
The post Trend Micro Patches Critical Code Execution Flaw in Apex Central appeared first on SecurityWeek.
U.K. boosts public-sector cybersecurity, UAT-7290 expands Linux-based espionage to Europe, and three critical n8n flaws allow attackers RCE.
On January 8th, MITRE’s Center for Threat-Informed Defense (CTID) published a significant update to INFORM, its threat-informed defense maturity model. This update reflects the joint efforts of MITRE researchers, AttackIQ, and several CTID members to enhance INFORM based on two years of operational...
The OSINT Doctrine : cycle, cadres d’analyse, OPSEC et validation pour enquêter en sources ouvertes sans pirater....
U.S. prosecutors have charged an Illinois man with orchestrating a phishing operation that allowed him to hack the Snapchat accounts of nearly 600 women to steal private photos and sell them online. [...]
NordPass simplifies secure logins by including Authenticator on multiple devices in the application for personal use. The time-based one-time password (TOTP) support enables users to add an extra layer of security to their accounts with two-factor authentication, without the need to download or inst...
The Emergency Directives were retired because they achieved objectives or targeted vulnerabilities included in the KEV catalog.
The post CISA Closes 10 Emergency Directives as Vulnerability Catalog Takes Over appeared first on SecurityWeek.
The European Commission has opened a public call for evidence on European open digital ecosystems, a step toward a planned Communication that will examine the role of open source in EU’s digital infrastructure. The consultation runs from January 6 to February 3, 2026. Submissions will be used to sha...
Huntress analysis suggests VM escape bugs were already weaponized in the wild Chinese-linked cybercriminals were sitting on a working VMware ESXi hypervisor escape kit more than a year before the bugs it relied on were made public.…
Europol-backed operation targets group behind numerous BEC attacks and romance scams
Chinese-Speaking Threat Actors Exploited VMware ESXi Zero-Days Over a Year Before Disclosure Huntress security researchers uncovered a sophisticated VMware ESXi exploitation campaign using a zero-day toolkit dubbed MAESTRO that was built over a year before VMware’s public disclosure in March 2025. T...
srcset="https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_2695413081.jpg?quality=50&strip=all 6000w, https://b2b-contenthub.com/wp-content/uploads/2026/01/shutterstock_2695413081.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
Radware bypassed ChatGPT’s protections to exfiltrate user data and implant a persistent logic into the agent’s long-term memory.
The post ‘ZombieAgent’ Attack Let Researchers Take Over ChatGPT appeared first on SecurityWeek.
Linking your medical records to ChatGPT Health may give you personalized wellness answers, but it also comes with serious privacy implications.
Understanding ISO 42001
ISO/IEC 42001 is the world’s first international standard for establishing, implementing, maintaining, and continually improving an Artificial Intelligence Management System (AIMS). Published by the International Organization for Standardization (ISO) and the Internatio...