> TODAY'S SUMMARY (19 articles)
Today's cybersecurity landscape is marked by several critical threats and trends. Recently patched vulnerabilities in Barracuda devices are being actively exploited, allowing attackers root access. Cisco's BroadWorks and Openwave flaws are also under attack despite available patches. Apple has addressed Bluetooth and AirPlay vulnerabilities, reinforcing the need for prompt patching as 45% of EU IT service providers delay critical updates. New malware threatens Exchange servers, and leaked exploit kits are compromising iPhones via ads. Additionally, Microsoft released a substantial patch update addressing 1,094 vulnerabilities, including a critical zero-day in Outlook that risks credential theft. Cybersecurity resilience remains a priority as organizations grapple with the rising tide of AI-discovered vulnerabilities.
|
// AI-powered summary generated at 08:00
L'Autorité de protection des données (APD) belge a publié une décision prononçant une réprimande à l'encontre d'une société pour des manquements liés à la gestion des adresses de messagerie d'un ancien collaborateur.Cette affaire débute par une plainte déposée par un ancien collaborateur, signalant...
L'autorité espagnole de protection des données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de MONUMENTAL FORMA SPORT, S.L. (comprenant le prononcé d'une amende de 3 000 €) pour des manquements en lien avec le principe de minimisation des données.Cette affaire débute par une pla...
pcTattletale boss Bryan Fleming faces up to 15 years in prison when sentenced later this year The US government has secured a guilty plea from a stalkerware maker in federal court, marking just the second time in more than a decade that the US has managed to prosecute a consumer spyware vendor succe...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de BLUE TEAM ÉCOLE DE PILOTAGE, S.L. (comprenant le prononcé d'une amende de 6 000 €) pour des manquements en lien avec son obligation de coopération avec l'autorité de contrôle.Cette affai...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de EXCEL HOTELS & RESORTS, S.A., comprenant le prononcé d'une amende de 40 000 €, pour des manquements en lien avec la sécurité des données personnelles.Cette affaire débute par une plainte transmi...
On November 27th, 2025, we received a submission for a Site Reset and Privilege Escalation vulnerability in Demo Importer Plus, a WordPress plugin with more than 10,000 active installations. This vulnerability can be leveraged to trigger a full site reset and assign the administrator role to the att...
L'autorité finlandaise de protection des données communique sur l'entrée en vigueur, le 1er janvier 2026, des compétences des autorités nationales chargées de superviser le règlement sur l'intelligence artificielle.Les lois finlandaises de mise en œuvre du règlement sur l'IA sont entrées en vigueur...
Net-SNMP could be made to crash if it received specially crafted input.
A cybercrime gang known as Black Cat has been attributed to a search engine optimization (SEO) poisoning campaign that employs fraudulent sites advertising popular software to trick users into downloading a backdoor capable of stealing sensitive data.
According to a report published by the National...
The new proactive services from Microsoft Incident Response turn security uncertainty into readiness with expert‑led preparation and advanced intelligence.
The post Explore the latest Microsoft Incident Response proactive services for enhanced resilience appeared first on Microsoft Security Blog.
The country’s National Security Bureau said attacks rose 6% in 2025, with the energy and hospital sectors seeing the biggest rise.
The post Taiwan blames Chinese ‘cyber army’ for rise in millions of daily intrusion attempts appeared first on CyberScoop.
Malicious Windows packer named pkr_mtsi used as a flexible malware loader in malvertising campaigns
A recent breach disclosure reveals that claims management firm Sedgwick was targeted by the TridentLocker ransomware group, with attackers claiming to have exfiltrated sensitive data from systems supporting its government services operations before deploying ransomware, according to Cybersecurity Ne...
A recent security update reveals that Google patched a high-severity Chrome WebView vulnerability that could allow attackers to bypass application security restrictions and execute malicious content within Android and enterprise applications, according to Cybersecurity News. Because Chrome WebView i...
Microsoft has confirmed a known issue that prevents recipients from opening encrypted emails in classic Outlook. [...]
Chen Zhi’s arrest is the latest chapter in the remarkable downfall of one of the country’s most prominent businesses, with holdings in the real estate, banking, entertainment and airline industries.
New Android malware enables unauthorized tap-to-pay transactions without physical access to bank cards
Session 8A: Email Security
Authors, Creators & Presenters: Shushang Wen (School of Cyber Science and Technology, University of Science and Technology of China), Yiming Zhang (Tsinghua University), Yuxiang Shen (School of Cyber Science and Technology, University of Science and Technology of Chin...
IntroductionZscaler ThreatLabz regularly monitors the npm database for suspicious packages. In November 2025, ThreatLabz identified three malicious packages: bitcoin-main-lib, bitcoin-lib-js, and bip40. The bitcoin-main-lib and bitcoin-lib-js packages execute a postinstall.cjs script during installa...
Security advice fails when it comes from those who don’t bear the consequences and won’t be responsible for making it work.
The post The Loudest Voices in Security Often Have the Least to Lose appeared first on SecurityWeek.