> TODAY'S SUMMARY (29 articles)
Today's cybersecurity news highlights several significant threats and trends. The discovery of the GhostPat vulnerability in Docker Hub (CVE-2026-105445) allows attackers to impersonate users, emphasizing the need for stronger access controls. Additionally, the Hirudo Android Trojan is replacing legitimate banking apps to steal user credentials, posing a growing risk to mobile banking. On the corporate front, the Metropolitan Police faced scrutiny for improperly using a shoplifting platform, underscoring the importance of compliance with privacy regulations. In response to emerging threats, companies like Qualys and Palo Alto Networks are enhancing their cybersecurity tools, with Qualys introducing TruConfidence for automated risk remediation and Palo Alto addressing critical vulnerabilities in its PAN-OS. Meanwhile, Microsoft has dismantled a phishing marketplace responsible for over a billion malicious emails, highlighting the ongoing battle against cybercrime.
|
// AI-powered summary generated at 08:00
USN-7851-1 introduced a regression in runC
U.S. banking giants including JPMorgan Chase, Citi, and Morgan Stanley are working to identify what data was stolen in a recent cyberattack on a New York financial firm.
Explore a selection of the latest DFIR employment opportunities in this week’s Forensic Focus jobs round-up.
Trojanized npm packages spread new variant that executes in pre-install phase, hitting thousands within days A self-propagating malware targeting node package managers (npm) is back for a second round, according to Wiz researchers who say that more than 25,000 developers had their secrets compromise...
NIS 2 : les entités assujetties peuvent se pré-enregistrer
anssiadm
lun 24/11/2025 - 14:07
Le service de pré-enregistrement des entités assujetties à la directive NIS 2 est désormais disponible.
Le service de pré...
Harvard University disclosed over the weekend that its Alumni Affairs and Development systems were compromised in a voice phishing attack, exposing the personal information of students, alumni, donors, staff, and faculty members. [...]
Trend Micro will launch the Trend Vision One AI Security Package in December. The package delivers centralized exposure management with analytics for AI-driven environments. It protects the AI application stack from model development to runtime and extends security across every stage of AI deploymen...
Morphisec has observed a new operation embedding StealC V2 malware in Blender project files, targeting users via 3D assets and launching a multi-stage infection chain
The WAF provides ways for our customers to gain insight into why it takes certain actions. The more granular and precise the insight, the more reproducible and understandable it is. Revamped payload logging is one such method.
Born out of an internal hackathon, Amazon’s Autonomous Threat Analysis system uses a variety of specialized AI agents to detect weaknesses and propose fixes to the company’s platforms.
Ransomware-Banden haben ihren Fokus von traditionellen lokalen Zielen auf Cloud-Speicherdienste und insbesondere Amazon S3 verlagert. ImageFlow – shutterstock.com
Ein aktueller Bericht von Trend Micro beschreibt eine neue Welle von Angriffen, bei denen Angreifer Cloud-native...
See how the latest Shai-Hulud attack works.
The post Shai-Hulud: The Second Coming appeared first on Security Boulevard.
The attacker never sleeps and neither do you.
At least, that’s how it feels when your job is to stay one step ahead of someone whose only job is to break things.
Cybersecurity isn’t just a technical domain. It’s psychological warfare. And for the defenders on the front l...
Without proper security controls, AI agents could perform malicious actions, such as data exfiltration and malware installation.
The post Microsoft Highlights Security Risks Introduced by New Agentic AI Feature appeared first on SecurityWeek.
Black Friday 2025 is shaping up to be a good moment for anyone thinking about tightening their cybersecurity. A few solid deals are popping up that make it easier to improve protection for systems and data without stretching your budget. If you have been waiting for the right time to upgrade or add...
At the Autonomous University of Yucatán (UADY), technology has long been central to supporting academic excellence. As the university expanded to serve more than 20,000 students across five campuses, its IT team faced increasing pressure on an aging cybersecurity infrastructure. Manual patching, li...
Expanding customer choice and bringing Sophos Central closer to customers and partners across the Middle East.
Several security issues were fixed in cups-filters.
Months after China-linked spies burrowed into US networks, regulator tears up its own response The Federal Communications Commission (FCC) has scrapped a set of telecom cybersecurity rules introduced after the Salt Typhoon espionage campaign, reversing course on measures designed to stop state-backe...
Security is reaching a breaking point as growing technical complexity becomes a major risk vector. Learn why modern systems amplify threats—and how to stay ahead.
The post Security is at a Tipping Point: Why Complexity is the New Risk Vector appeared first on Security Boulevard.