> TODAY'S SUMMARY (4 articles)
Today's cybersecurity highlights include a significant data breach involving СберСпасибо, with 3,288,711 accounts compromised. Microsoft has issued its November 2026 Patch Tuesday update, addressing 1,328 vulnerabilities, including 60 rated as critical, emphasizing the need for urgent patching. Additionally, a critical remote code execution vulnerability has been identified in Ruflo MCP Bridge version 3.16.2, posing serious risks to affected systems. Organizations are advised to prioritize updates and monitor for potential exploitation of these vulnerabilities. Overall, the cybersecurity landscape remains fraught with threats, underscoring the importance of robust security measures.
|
// AI-powered summary generated at 04:00
It normally begins as any other day. Your website is live. Your APIs are responding. Customers are checking out, logging in, and going about their lives. Then suddenly it all comes to an end. The homepage refuses to load. APIs start generating TLS errors. Mobile apps can’t connect. Support tickets a...
How an Ohio district uses Cloud Monitor to gain visibility, prevent risk, and stay prepared in Google Workspace Morgan Local Schools is located in rural McConnelsville, Ohio, serving about 1,600 students and 250 staff. With limited home internet access throughout the community, the district relies h...
The Invisible Half of the Identity Universe
Identity used to live in one place - an LDAP directory, an HR system, a single IAM portal.
Not anymore. Today, identity is fragmented across SaaS, on-prem, IaaS, PaaS, home-grown, and shadow applications. Each of these environments carries its own accounts...
As December 2025 comes to a close, Sonrai’s latest review of newly released AWS permissions highlights a continued expansion of cloud privilege. This month’s updates span identity, observability, AI, and managed service infrastructure, with changes across CloudWatch, CloudFront, Bedrock, EKS, SageMa...
Popular artificial intelligence (AI)-powered Microsoft Visual Studio Code (VS Code) forks such as Cursor, Windsurf, Google Antigravity, and Trae have been found to recommend extensions that are non-existent in the Open VSX registry, potentially opening the door to supply chain risks when bad actors...
The VPN company has conducted an investigation after a threat actor claimed to have hacked its systems.
The post NordVPN Denies Breach After Hacker Leaks Data appeared first on SecurityWeek.
Security researchers have flagged a high-severity flaw in Open WebUI, a self-hosted enterprise interface for large language models, that allows external model servers connected via its Direct Connections feature to inject malicious code and hijack AI workloads.
The issue, t...
Microsoft has pushed back against claims that multiple prompt injection and sandbox-related issues raised by a security engineer in its Copilot AI assistant constitute security vulnerabilities. The development highlights a growing divide between how vendors and researchers define risk in generative...
JLR’s wholesale sales plunged 43% and retail drops 25% in the third quarter of 2025 following the 2025 cyber-attack
From BitLocker and Android RAM to deepfakes, drones and AI ethics, F3 2025 delivered three packed days of insight, tools and real-world case studies for the digital forensics community.
Ray Canzanese said that increased reliance on managed corporate accounts should provide cybersecurity teams with more visibility.
The post Report: Increase Usage of Generative AI Services Creates Cybersecurity Challenge appeared first on Security Boulevard.
From Contrast’s threat researchers: Proof that Contrast detects zero-days. The Contrast agent doesn’t require signatures or extensive framework knowledge; it identifies vulnerabilities by monitoring how untrusted data flows through a live application.
The post Detecting Zero-Day Vulnerabiliti...
Phones, email, and core systems knocked out at Higham Lane in Nuneaton Students at a school in Warwickshire, England, have scored an extended Christmas break after a cyberattack crippled its IT systems, forcing classrooms to close and staff to summon government incident responders.…
Central government will supposedly be as secure as energy facilities and datacenters under new proposals The UK today launches its Government Cyber Action Plan, committing £210 million ($282 million) to strengthen defenses across digital public services and hold itself to the same cybersecurity stan...
Introduction Code signing is no longer an optional process – Windows, antivirus engines, and enterprise security tools all expect executables to be digitally signed. Previously, developers purchased an EV Code Signing Certificate, stored it on a USB token or HSM, and had to maintain it for years. Az...
Behavioral analytics, or BA, is becoming increasingly useful in the world of cybersecurity. With cyberthreats ever-evolving and with businesses of all shapes and sizes striving to keep up, BA is helping companies future-proof their data, networks, and other assets with greater confidence BA uses ar...
Significant cybersecurity M&A deals announced by Akamai, Red Hat, Checkmarx, Silent Push, and ServiceNow.
The post Cybersecurity M&A Roundup: 30 Deals Announced in December 2025 appeared first on SecurityWeek.
Le 4 janvier 2026, un pirate a publié sur BreachForums ce qu'il présentait comme des fichiers de configuration et des clés API internes de NordVPN.
Le post Cyberattaque : NordVPN conteste la fuite de données revendiquée sur BreachForums a été publié sur IT-Connect.
Police in India have arrested a former Coinbase customer service agent who is believed to have been bribed by cybercriminal gangs to access sensitive customer information.
Read more in my article on the Hot for Security blog.
De nouveaux ordinateurs équipés d'une puce Snapdragon X2 et de Windows 11 26H1 seront mis sur le marché à partir d'avril 2026. Voici ce que l'on sait.
Le post Les premiers PC avec un Snapragon X2 et Windows 11 26H1 attendus pour avril 2026 a été publié sur IT-Connect.