> TODAY'S SUMMARY (67 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a zero-day vulnerability in Palo Alto Networks' PAN-OS, leading to root access and prompting emergency patches from CISA. Ransomware tactics are evolving, as criminals increasingly target employees' families and leverage AI for more sophisticated attacks. The FTC has accused a firm of preying on sextortion victims, while Microsoft has disrupted a massive phishing network responsible for over a billion scam messages. Additionally, vulnerabilities in widely used tools like Cisco's email gateway and LiteLLM pose significant risks, underscoring the importance of timely patching and vigilance in threat detection.
|
// AI-powered summary generated at 12:01
Three London councils reported disruption, prompting officials to shut down phone lines and networks and activate emergency plans.
In this post, we introduce the AWS provider for the Secrets Store CSI Driver, a new AWS Secrets Manager add-on for Amazon Elastic Kubernetes Service (Amazon EKS) that you can use to fetch secrets from Secrets Manager and parameters from AWS Systems Manager Parameter Store and mount them as files in...
Even worse, it might have been a 'test run' for future attacks A Mirai-based botnet named ShadowV2 emerged during last October's widespread AWS outage, infecting IoT devices across industries and continents, likely serving as a "test run" for future attacks, according to Fortinet's FortiGuard Labs.âŠ
L'Agence Espagnole de Protection des DonnĂ©es (AEPD) a publiĂ© une dĂ©cision de sanction Ă l'encontre de l'Association Ăcole Nationale d'Ăquitation (AENE), comprenant le prononcĂ© d'une amende de 750 âŹ, pour des manquements en lien avec le non-respect d'une injonction antĂ©rieure.Cette affaire dĂ©bute par...
Cisco Talosâ Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Dell ControlVault 3 firmware and its associated Windows software, four vulnerabilities in Entr'ouvert Lasso, and one vulnerability in GL.iNet Slate AX.The vulnerabilities mentioned in this blog post h...
L'AutoritĂ© nationale de surveillance du traitement des donnĂ©es Ă caractĂšre personnel (ANSPDCP) de Roumanie a publiĂ© une dĂ©cision de sanction Ă l'encontre de Cucina di Fabio S.R.L., comprenant le prononcĂ© d'une amende de 15 253 lei (3 000 âŹ), pour des manquements en lien avec l'envoi de communication...
The House Homeland Security Committee asked Dario Amodei to answer questions about the implications of the attack and how policymakers and AI companies can respond.
The post Congress calls on Anthropic CEO to testify on Chinese Claude espionage campaign appeared first on CyberScoop.
L'autoritĂ© espagnole de protection des donnĂ©es (AEPD) a aujourd'hui publiĂ© une dĂ©cision de sanction Ă l'encontre de STRATESYS TECHNOLOGY SOLUTIONS, S.L. (comprenant le prononcĂ© d'une amende de 100 000 âŹ) pour des manquements en lien avec la sĂ©curitĂ© des donnĂ©es personnelles suite Ă une cyberattaque....
La Commission Nationale de l'Informatique et des LibertĂ©s (CNIL) a publiĂ© les rĂ©sultats d'un sondage sur les prĂ©judices matĂ©riels subis par les individus suite Ă des violations de donnĂ©es personnelles.L'enquĂȘte, menĂ©e du 18 au 23 dĂ©cembre 2024 auprĂšs de 2 082 personnes, rĂ©vĂšle que 41 % des rĂ©pondant...
Comcast will pay a $1.5 million fine to settle a Federal Communications Commission investigation into a February 2024 vendor data breach that exposed the personal information of nearly 275,000 customers. [...]
Following a rash of AI-assisted impersonations of U.S. officials, the bill would raise the financial and criminal penalties around using the technology to defraud.Â
The post New legislation targets scammers that use AI to deceive appeared first on CyberScoop.
Even with the holidays coming up, the digital rights news doesn't stop. Thankfully, EFF is here to keep you up-to-date with our EFFector newsletter!
In our latest issue, weâre explaining why politicians latest attempts to ban VPNs is a terrible idea; asking supporters to file public comments opposin...
The second wave of the Shai-Hulud supply chain attack has spilled over to the Maven ecosystem after compromising more than 830 packages in the npm registry.
The Socket Research Team said it identified a Maven Central package named org.mvnpm:posthog-node:4.18.1 that embeds the same two components ass...
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroeâs XKCD âHeart Mountainâ appeared first on Security Boulevard.
Instead of a duty of care, the KOSA draft includes language saying that platforms must establish and maintain âreasonable policies, practices, and proceduresâ that address harms to minors, including threats of physical violence, sexual exploitation and drug sales.
According to the Thales Consumer Digital Trust Index 2025, global confidence in digital services is slipping fast. After surveying more than 14,000 consumers across 15 countries, the findings are clear: no sector earned high trust ratings from even half its users. Most industries are seeing trust e...
The Royal Borough of Kensington and Chelsea (RBKC) and the Westminster City Council (WCC)Â announced that they are experiencing service disruptions following a cybersecurity issue. [...]
A prolific cybercriminal group that calls itself "Scattered LAPSUS$ Hunters" made headlines regularly this year by stealing data from and publicly mass extorting dozens of major corporations. But the tables seem to have turned somewhat for "Rey," the moniker chosen by the technical operator and publ...
AI-driven ALPR systems are a mass dragnet-surveillance system that poses a direct threat to the privacy and freedom of everyone in the US.
GSMA says fragmented, poorly designed laws add burdens without making networks any safer Mobile operators' core cybersecurity spending is projected to more than double by 2030 as threats evolve, while poorly designed and fragmented policy frameworks add extra compliance costs, according to industry...