> TODAY'S SUMMARY (67 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Attackers are actively exploiting a zero-day vulnerability in Palo Alto Networks' PAN-OS, leading to root access and prompting emergency patches from CISA. Ransomware tactics are evolving, as criminals increasingly target employees' families and leverage AI for more sophisticated attacks. The FTC has accused a firm of preying on sextortion victims, while Microsoft has disrupted a massive phishing network responsible for over a billion scam messages. Additionally, vulnerabilities in widely used tools like Cisco's email gateway and LiteLLM pose significant risks, underscoring the importance of timely patching and vigilance in threat detection.
|
// AI-powered summary generated at 12:01
Abdulfatah Abdillahi discovered a cross-site scripting vulnerability in the web client of the Tryton application platform. For the oldstable distribution (bookworm), this problem has been fixed in version 6.0.28+ds1-2+deb12u2. For the stable distribution (trixie), this problem has been fixed in
Session4A: IoT Security
Authors, Creators & Presenters: Haoqiang Wang, Yiwei Fang (Institute of Information Engineering, Chinese Academy of Sciences; School of Cyber Security, University of Chinese Academy of Sciences; Indiana University Bloomington), Yichen Liu (Indiana University Bloomington),...
Immigration and Customs Enforcement lifted a $180 million cap on a proposed immigrant-tracking program while guaranteeing multimillion-dollar payouts for private surveillance firms.
The law enforcement agency said they have received more than 5,100 complaints about Account Takeover (ATO) fraud since January and have tallied losses exceeding $262 million.
The 183M credentials came from infostealer logs. Learn why continuous password monitoring is essential for modern defense.
The post 183 Million Credentials Misreported as a Gmail Breach appeared first on Security Boulevard.
Black Friday 2025 is almost here, and early deals are already live across security software, online courses, system administration tools, antivirus products, and VPN services. These discounts are limited-time offers and vary by provider, so if you see something that fits your needs, it's best to act...
Radware has developed a firewall for large language models (LLMs) that ensures governance and security policies are enforced in real time. Provided as an add-on to the company’s Cloud Application Protection Services, Radware LLM Firewall addresses the top 10 risks and mitigations for LLMs and gener...
This blog is intended to share an in-depth analysis of a recent multi-stage attack attributed to the Water Gamayun advanced persistent threat group (APT). Drawing on telemetry, forensic reconstruction, and known threat intelligence, the Zscaler Threat Hunting team reconstructed how a seemingly innoc...
Introducing Oxygen Review Center v.2.0 — a faster, browser-based, real-time collaboration platform that streamlines digital evidence review for teams of any size.
The firm achieved “Category Leader” status in all five evaluated categories, recognized for its innovative approach to mapping threat actor infrastructure. Fremont, CA – November 25, 2025 – Constella Intelligence, a leader in digital risk protection and identity threat intelligence, today announced...
CISA has described the techniques used by attackers and pointed out that the focus is on high-value individuals.
The post CISA Warns of Spyware Targeting Messaging App Users appeared first on SecurityWeek.
Amazon Web Services (AWS) is introducing guidelines for network scanning of customer workloads. By following these guidelines, conforming scanners will collect more accurate data, minimize abuse reports, and help improve the security of the internet for everyone. Network scanning is a practice in mo...
Focusing on improving the resilience of AI agents, the startup will use the funding to accelerate deployments of its platform.
The post AI Agent Security Firm Vijil Raises $17 Million appeared first on SecurityWeek.
Hashtag-do-whatever-I-tell-you Cato Networks says it has discovered a new attack, dubbed "HashJack," that hides malicious prompts after the "#" in legitimate URLs, tricking AI browser assistants into executing them while dodging traditional network and server-side defenses.…
The Georgia Superior Court Clerks' Cooperative Authority (GSCCCA) said it is experiencing a “credible and ongoing cybersecurity threat” that forced the organization to temporarily restrict access to its website and services.
L'Inspection nationale des données de Lettonie (DVI) a publié des lignes directrices sur les conditions de légalité de l'enregistrement audio couplé à la vidéosurveillance.L'autorité souligne que l'enregistrement audio présente des risques pour la vie privée nettement plus élevés que la seule captur...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre d'AENA, S.M.E., S.A., comprenant le prononcé d'une amende de 10 043 002 €, pour des manquements liés à la mise en œuvre de son système de reconnaissance faciale dans les aéroports espagnols.Cette affai...
The FBI warns of a surge in account takeover (ATO) fraud schemes and says that cybercriminals impersonating various financial institutions have stolen over $262 million in ATO attacks since the start of the year. [...]
L'autorité espagnole de protection des données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de XFERA MÓVILES, S.A.U. (comprenant le prononcé d'une amende de 4 000 000 €) pour des manquements en lien avec la sécurité des données personnelles suite à une violation de données de gr...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de ATRESMEDIA CORPORACIÓN DE MEDIOS DE COMUNICACIÓN, S.A. (comprenant le prononcé d'une amende de 6 000 €) pour des manquements en lien avec le principe de minimisation des données.Cette af...