> TODAY'S SUMMARY (29 articles)
Today's cybersecurity news highlights several significant threats and trends. The discovery of the GhostPat vulnerability in Docker Hub (CVE-2026-105445) allows attackers to impersonate users, emphasizing the need for stronger access controls. Additionally, the Hirudo Android Trojan is replacing legitimate banking apps to steal user credentials, posing a growing risk to mobile banking. On the corporate front, the Metropolitan Police faced scrutiny for improperly using a shoplifting platform, underscoring the importance of compliance with privacy regulations. In response to emerging threats, companies like Qualys and Palo Alto Networks are enhancing their cybersecurity tools, with Qualys introducing TruConfidence for automated risk remediation and Palo Alto addressing critical vulnerabilities in its PAN-OS. Meanwhile, Microsoft has dismantled a phishing marketplace responsible for over a billion malicious emails, highlighting the ongoing battle against cybercrime.
|
// AI-powered summary generated at 08:00
More than 1.6 Tb of data allegedly stolen from Cox was made public by the hackers.
The post Cox Confirms Oracle EBS Hack as Cybercriminals Name 100 Alleged Victims appeared first on SecurityWeek.
For the latest discoveries in cyber research for the week of 24th November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES The notorious “Scattered LAPSUS$ Hunters” group claimed responsibility for a supply-chain attack involving the Salesforce-integrated platform Gainsig...
Microsoft has confirmed a critical Windows 11 24H2 bug that causes the File Explorer, the Start Menu, and other key system components to crash after installing cumulative updates released since July 2025. [...]
Exterro’s Justin Tolman joins the Forensic Focus Podcast to discuss FTK Imager Pro, AI’s impact on DFIR, cloud vs on-prem, and tackling growing case backlogs.
Spanish airline Iberia has begun emailing its customers about a supplier data breach
Why your business needs the best-of-breed combination of technology and human expertise
SambaSPY: The RAT that targets selective victims Human error isn’t just about careless clicks or weak passwords — attackers are now deploying extremely targeted malware to exploit very specific victims. One such threat is SambaSpy, a sophisticated Remote Access Trojan (RAT) that’s not mass-sprayed a...
Why today’s AI attack agents boost human attackers but still fall far from becoming real autonomous weapons. Anthropic recently published a report that sparked a lively debate about what AI agents can actually do during a cyberattack. The study shows an AI system, trained specifically for offensive...
Work that once took months now takes hours. Work that once demanded large product engineering teams now depends on clarity, context, and precise prompts. This...Read More
The post AI has changed the cost of experimentation appeared first on ISHIR | Custom Software Development Dallas Texas.
The post...
The International Defence Esports Games (IDEG) will help sharpen cyber and battlefield skills for allied soldiers
An SME’s guide to selecting and working with managed service providers.
Reflections on coaching, collaboration, and the pursuit of excellence in cyber security Partner Content From 6th to 10th October 2025, ten exceptional cyber enthusiasts proudly flew the flag for the United Kingdom in the European Cyber Security Challenge (ECSC), held this year in the vibrant settin...
International cybercrime-fighting agencies, co-ordinated by Europol, took down over 1000 servers and seized 20 domains earlier this month as part of Operation Endgame 3.0.
Their target? Three major malware platforms: the infostealer known as Rhadamanthys, the VenomRAT remote access trojan, and th...
Microsegmentation promised to change everything: limit lateral movement, contain breaches, and give security teams a level of control that traditional perimeter firewalls could never deliver. And it does deliver when...
The post The Role of NSPM in Microsegmentation and Attack Surface Reduction appe...
Two UK teens linked to Scattered Spider pleaded not guilty to charges over last year’s TfL cyberattack at a Southwark Crown Court hearing. Two British teens accused of Computer Misuse Act offenses for a cyberattack on Transport for London pleaded not guilty in court. Thalha Jubair (aka EarthtoStar,...
A list of topics we covered in the week of November 17 to November 23 of 2025
Un employé de CrowdStrike a été licencié après avoir partagé des captures d’écran des systèmes internes avec les pirates de Scattered Lapsus$ Hunters.
The post Chez CrowdStrike, l’ennemi vient de l’intérieur : un employé a partagé des informations avec des pirates ! first appeared on IT-Connect.
A recently patched security flaw in Microsoft Windows Server Update Services (WSUS) has been exploited by threat actors to distribute malware known as ShadowPad.
"The attacker targeted Windows Servers with WSUS enabled, exploiting CVE-2025-59287 for initial access," AhnLab Security Intelligence Cent...
In this Help Net Security interview, Colonel Ludovic Monnerat, Commander Space Command, Swiss Armed Forces, discusses how securing space assets is advancing in response to emerging quantum threats. He explains why satellite systems must move beyond traditional cryptography to remain protected. Monne...
It’s a familiar refrain: too much work and not enough compensation and recognition. Yet, while CISOs have seen their role grow in prominence and responsibility, the same cannot be said of functional security leaders who are being asked to do more — but are not reaping the bene...