> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape reveals several critical threats and vulnerabilities. Over 600,000 WordPress sites are at risk due to a newly discovered SQL injection vulnerability in the Backuply plugin. Additionally, a serious flaw in Cisco's Secure Email Gateway is actively being exploited, allowing attackers to gain root access and execute commands. The UK Legal Aid Agency hack has expanded in scope, with records dating back to 1978 compromised. New malware, including the Android RAT "Hirudo," is stealing banking credentials by replacing legitimate apps. Meanwhile, sophisticated spyware distribution methods via targeted ads raise concerns about zero-click exploits. Organizations are urged to patch vulnerabilities promptly as the cyber threat landscape evolves rapidly.
|
// AI-powered summary generated at 16:01
A ransomware attack against the CodeRED emergency alert platform has triggered warnings across the US.
Cyberkriminelle sind in das System des Datenanalyseanbieters von OpenAI eingedrungen.babar ali 1233 – shutterstock.com
Laut einer Mitteilung von OpenAI haben sich Cyberkriminelle Anfang November Zugriff auf die Systeme des Analysedienst Mixpanel verschafft. Demnach wurden da...
Detego Global has announced the launch of Detego Case Manager for DFIR, a purpose-built platform designed to meet the evolving demands of digital forensics and incident response (DFIR) teams. Developed in close collaboration with investigative professionals, Detego Case Manager for DFIR addresses th...
Almost two million people may have seen their personal data exposed following a large-scale cyberattack that hit Asahi in September 2025
It was discovered that the libxml2 Python bindings incorrectly handled
certain return values. An attacker could possibly use this issue to cause
libxml2 to crash, resulting in a denial of service. (CVE-2025-32414)
It was discovered that libxml2 incorrectly handled certain memory
operations. A remot...
USN-7582-1 fixed a vulnerability in libxml2. This update provides the
corresponding fix for Ubuntu 16.04 LTS, Ubuntu 18.04 LTS and
Ubuntu 20.04 LTS.
Original advisory details:
It was discovered that libxslt, used by libxml2, incorrectly handled
certain attributes. An attacker could use this issu...
Agency flags hijacks of insecure studio-to-transmitter gear after attackers pipe in fake alerts and vulgar audio Malicious intruders have hijacked US radio gear to turn emergency broadcast tones into a profanity-laced alarm system.…
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
ar...
Scammers are stepping up their game for the holidays, impersonating brands to trick people into handing over their accounts.
Brewer finally tallies fallout from September attack as it pushes earnings into 2026 Asahi has finally done the sums on September's ransomware attack in Japan, conceding the crooks may have helped themselves to personal data tied to almost 2 million people.…
Join Oxygen Forensics for a hands-on walkthrough of KeyScout, where Keith Lockhart demonstrates how to collect, filter, and analyse critical forensic data across Windows, macOS, and Linux systems.
ServiceNow is reportedly in advanced talks to acquire Veza, an identity security startup, for more than $1 billion.
For ServiceNow customers deploying AI agents across their organizations, the acquisition would address a critical gap: controlling what those agents can acces...
srcset="https://b2b-contenthub.com/wp-content/uploads/2025/11/shutterstock_2108335628.jpg?quality=50&strip=all 5760w, https://b2b-contenthub.com/wp-content/uploads/2025/11/shutterstock_2108335628.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthu...
Audit sympathetic toward Comhairle nan Eilean Siar as staff stretched to capacity trying to recover Auditors remain concerned about the cyber resilience of a Scottish council as some systems are yet to be fully rebuilt following a ransomware attack in November 2023.…
Multiple Mixpanel customers were impacted by a recent cyberattack targeting the product analytics company.Â
The post OpenAI User Data Exposed in Mixpanel Hack appeared first on SecurityWeek.
A newly highlighted flaw in Microsoft’s cross-tenant collaboration model shows that once a user accepts a guest invitation in Teams, their Defender for Office 365 protections are dropped entirely, leaving them exposed inside an external tenant even while logged in with their h...
Discover how MSAB brings GPU acceleration back to mobile brute-forcing in a new blog by Magnus Johansson.
OpenAI is notifying some ChatGPT API customers that limited identifying information was exposed following a breach at its third-party analytics provider Mixpanel. [...]
The breach may have exposed OpenAI API customers’ data
Analysis of ICO records shows no surge in breaches during Q4 2024 with no seasonal spike in reported incidents