> TODAY'S SUMMARY (29 articles)
Today's cybersecurity news highlights several significant threats and trends. The discovery of the GhostPat vulnerability in Docker Hub (CVE-2026-105445) allows attackers to impersonate users, emphasizing the need for stronger access controls. Additionally, the Hirudo Android Trojan is replacing legitimate banking apps to steal user credentials, posing a growing risk to mobile banking. On the corporate front, the Metropolitan Police faced scrutiny for improperly using a shoplifting platform, underscoring the importance of compliance with privacy regulations. In response to emerging threats, companies like Qualys and Palo Alto Networks are enhancing their cybersecurity tools, with Qualys introducing TruConfidence for automated risk remediation and Palo Alto addressing critical vulnerabilities in its PAN-OS. Meanwhile, Microsoft has dismantled a phishing marketplace responsible for over a billion malicious emails, highlighting the ongoing battle against cybercrime.
|
// AI-powered summary generated at 08:00
SESSION
Session 3D: AI Safety
-----------
-----------
Authors, Creators & Presenters: Yan Pang (University of Virginia), Aiping Xiong (Penn State University), Yang Zhang (CISPA Helmholtz Center for Information Security), Tianhao Wang (University of Virginia)
-----------
PAPER
Towards Understandi...
Attackers can send highly realistic push notifications through your browser, including fake alerts that can lead to malware or phishing pages.
CISA has added CVE-2025-61757 to its Known Exploited Vulnerabilities (KEV) catalog.Â
The post CISA Confirms Exploitation of Recent Oracle Identity Manager Vulnerability appeared first on SecurityWeek.
Sleepless nights in cybersecurity
When I attended the Global Cyber Conference 2025 in Zurich last week, I expected world-class keynotes and sharp panel debates. What I didn’t expect were so many conversations about sleep. Or rather, the absence of it. The exhaustion was pal...
The company has confirmed that it terminated an insider who shared screenshots of his computer with cybercriminals.
The post CrowdStrike Insider Helped Hackers Falsely Claim System Breach appeared first on SecurityWeek.
Dans Windows 11 Insider Preview Build 26220.7271, Microsoft a ajouté le préchargement pour l'Explorateur de fichiers et le menu contextuel a été modifié.
The post Windows 11 : un Explorateur de fichiers plus rapide grâce au préchargement ? first appeared on IT-Connect.
Fluent Bit has 15B+ deployments … and 5 newly assigned CVEs A series of "trivial-to-exploit" vulnerabilities in Fluent Bit, an open source log collection tool that runs in every major cloud and AI lab, was left open for years, giving attackers an exploit chain to completely disrupt cloud services an...
Cybersecurity researchers have discovered five vulnerabilities in Fluent Bit, an open-source and lightweight telemetry agent, that could be chained to compromise and take over cloud infrastructures.
The security defects "allow attackers to bypass authentication, perform path traversal, achieve remot...
Hybrid work exposes the limits of SCCM and WSUS, with remote devices often missing updates and WSUS now deprecated. Action1's cloud-native patching keeps devices updated from any location, strengthening compliance and security. [...]
Critical flaws in Fluent Bit threaten telemetry across platforms according to an advisory published by Oligo Security researchers
Hacklore.org includes the launch of a website and a letter signed by more than 80 cybersecurity professionals.
The post This campaign aims to tackle persistent security myths in favor of better advice appeared first on CyberScoop.
Discover what’s changed in the OWASP 2025 Top 10 and how GitGuardian helps you mitigate risks like broken access control and software supply chain failures.
The post OWASP Top 10 2025 Updates: Supply Chain, Secrets, And Misconfigurations Take Center Stage appeared first on Security Boulevard.
We continue to encounter high-profile vulnerabilities that relate to how URL mapping (or "aliases") interac&#;x26;#;x5c;&#;x26;#;x7c;zsh:1: parse error near &#;x26;#;x60;&#;x26;&#;x26;#;39; ts with URL-based access control. Last week, we wrote about the Oracle Identity Manager vu...
It was discovered that Python inefficiently handled expanding system
environment variables. An attacker could possibly use this issue to cause
Python to consume excessive resources, leading to a denial of service.
(CVE-2025-6075)
Caleb Brown discovered that Python incorrectly handled the ZIP64 End...
Delta Dental of Virginia suffered a data breach that exposed personal and health data of about 146,000 customers after the hack of an email account. A security breach at the dental care provider Delta Dental of Virginia (DDVA) exposed data of about 146,000 people, including names, Social Security nu...
Donbas Post, which operates in the Russian-controlled parts of Donetsk and Luhansk, said the incident affected its corporate network, web platform and email systems. The company had restricted access to several services to contain the breach and was working to restore operations.
SitusAMC rules out ransomware, but accounting records for major institutions potentially affected Real estate finance business SitusAMC says thieves sneaked into its systems earlier this month and made off with confidential client data.…
A lack of liability for software vendors is putting Britain’s economic and national security at risk, an influential committee of lawmakers warned on Monday.
Le protocole ARP pour "Address Resolution Protocol" est lié aux notions d'adresses MAC et d'adresses IP. Il joue un rôle important sur un réseau informatique.
The post Qu’est-ce que le protocole ARP ? first appeared on IT-Connect.
Hundreds of trojanized versions of well-known packages such as Zapier, ENS Domains, PostHog, and Postman have been planted in the npm registry in a new Shai-Hulud supply-chain campaign. [...]