> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape reveals several critical threats and vulnerabilities. Over 600,000 WordPress sites are at risk due to a newly discovered SQL injection vulnerability in the Backuply plugin. Additionally, a serious flaw in Cisco's Secure Email Gateway is actively being exploited, allowing attackers to gain root access and execute commands. The UK Legal Aid Agency hack has expanded in scope, with records dating back to 1978 compromised. New malware, including the Android RAT "Hirudo," is stealing banking credentials by replacing legitimate apps. Meanwhile, sophisticated spyware distribution methods via targeted ads raise concerns about zero-click exploits. Organizations are urged to patch vulnerabilities promptly as the cyber threat landscape evolves rapidly.
|
// AI-powered summary generated at 16:01
The North Korean threat actors behind the Contagious Interview campaign have continued to flood the npm registry with 197 more malicious packages since last month.
According to Socket, these packages have been downloaded over 31,000 times, and are designed to deliver a variant of OtterCookie that br...
The French Football Federation (FFF) disclosed a data breach on Friday after attackers used a compromised account to gain access to administrative management software used by football clubs. [...]
Crims claim to know which customers are marked 'vulnerable' British telco Brsk is investigating claims that it was attacked by cybercriminals who made off with more than 230,000 files.…
Le 24 novembre 2025, Microsoft a annoncé la prise en charge de l'authentification Entra ID pour les connexions RDP avec Azure Bastion, le bastion Cloud.
Le post Azure Bastion prend désormais en charge l’authentification Entra ID pour les connexions RDP a été publié sur IT-Connect.
Project cites fears of state access as cloud sovereignty row deepens French cloud outfit OVHcloud took another hit this week after GrapheneOS, a mobile operating system, said it was ditching the company's servers over concerns about France's approach to digital privacy.…
BitSight research has revealed how threat actors exploit calendar subscriptions to deliver phishing links, malware and social engineering attacks through hijacked domains
USN-7894-1 fixed vulnerabilities in EDK II. The update introduced a
regression in the UEFI network boot. This update reverts the corresponding
fixes for CVE-2023-45236 and CVE-2023-45237 pending further investigation.
We apologize for the inconvenience.
Original advisory details:
It was discover...
In a new paper, “Adversarial Poetry as a Universal Single-Turn Jailbreak Mechanism in Large Language Models,” researchers found that turning LLM prompts into poetry resulted in jailbreaking the models:
Abstract: We present evidence that adversarial poetry functions as a universal single-turn jailbre...
According to the federation, the unauthorized access was carried out using a compromised account.
The post French Soccer Federation Hit by Cyberattack, Member Data Stolen appeared first on SecurityWeek.
Poland arrests Russian hacker accused of espionage, FBI warns of banking scams in run up to holidays, and OpenAI alerts users to data breach.
Atola’s latest firmware update adds full ZFS support, LDAP authentication, and major performance boosts to TaskForce and TaskForce 2 forensic imagers.
Data exposure by top AI companies, the Akira ransomware haul, Operation Endgame against major malware families, and more of this month's cybersecurity news
Darktrace observed a 620% spike in Black Friday-themed phishing in the weeks leading up to the 2025 edition of the sale day
Training outfit scrambles to fix all-male lineup before December kickoff Cybersecurity training provider TryHackMe is scrambling to recruit women infosec pros to help with its Christmas challenge following backlash concerning a lack of gender diversity.…
Eine Sicherheitslücke in Googles KI-Coding-Tool Antigravity erlaubt es Angreifern, Schadcode einzuschleusen.Koshiro K – shutterstock.com
Anfang November brachte Google sein KI-gestĂĽtztes Coding-Tool Antigravity an den Start. Doch bereits nach 24 Stunden sind Forscher des Sec...
Discover what’s new on Forensic Focus – explore Exterro FTK Imager Pro and Oxygen Forensic KeyScout, catch up on highlights from Techno Security West, unpack how investigators can manage GenAI risk in police work, and more.
À l'occasion du Black Friday 2025, la marque KTC propose des remises sur plusieurs écrans de PC, y compris des écrans gaming : voici notre sélection d'offres.
Le post Black Friday 2025 chez KTC : des écrans gaming à prix réduits a été publié sur IT-Connect.
This blog explains why vulnerability scoring matters, how CVSS works, and what’s new in version 4.0.
Tech companies may universally offer an opt-out capability required by California law as a way to avoid having multiple versions of browsers and ask questions about residency.
US firms with ties to projects supporting Ukraine are being targeted by the Russia-aligned RomCom group, which is using fake software updates to drop the Mythic Agent onto victim systems.
In September 2025, Arctic Wolf Labs detected a campaign against a US engineering firm...