> TODAY'S SUMMARY (4 articles)
Today's cybersecurity highlights include a significant data breach involving СберСпасибо, with 3,288,711 accounts compromised. Microsoft has issued its November 2026 Patch Tuesday update, addressing 1,328 vulnerabilities, including 60 rated as critical, emphasizing the need for urgent patching. Additionally, a critical remote code execution vulnerability has been identified in Ruflo MCP Bridge version 3.16.2, posing serious risks to affected systems. Organizations are advised to prioritize updates and monitor for potential exploitation of these vulnerabilities. Overall, the cybersecurity landscape remains fraught with threats, underscoring the importance of robust security measures.
|
// AI-powered summary generated at 04:00
La Commission Nationale de l'Informatique et des Libertés (CNIL) précise les conditions de déploiement des caméras dites "touristiques" par les communes afin de garantir la protection de la vie privée.Suite à des contrôles, la CNIL a constaté que des caméras installées par des communes à des fins de...
Taiwan’s National Security Agency states that the number of Chinese cyberattacks against the country’s critical infrastructure increased by 6% in 2025, averaging 2.6 million attacks per day, Reuters reports.
The attacks mainly targeted the energy sector, hospitals, banks an...
Hackers have compromised a file transfer system at Sedgwick’s subsidiary that serves government agencies.
The post Sedgwick Confirms Cyberattack on Government Subsidiary appeared first on SecurityWeek.
France and Malaysia have launched investigations against Elon Musk’s AI chatbot Grok, after it generated sexualized deepfakes of women and minors, Techcrunch reports.
India has also demanded that X restrict Grok’s ability to generate “obscene, pornographic or pedophilic” im...
Ilya Lichtenstein, convicted for the 2016 Bitfinex hack, has been released early from prison to home confinement
Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing threat actors to claim the namespace and upload malicious extensions. [...]
The botnet known as Kimwolf has infected more than 2 million Android devices by tunneling through residential proxy networks, according to findings from Synthient.
"Key actors involved in the Kimwolf botnet are observed monetizing the botnet through app installs, selling residential proxy bandwidth,...
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in December.
A new Python-based malware called VVS stealer has been identified, targeting Discord users with stealthy techniques to steal data
Session 7D: ML Security
Authors, Creators & Presenters: Ruyi Ding (Northeastern University), Tong Zhou (Northeastern University), Lili Su (Northeastern University), Aidong Adam Ding (Northeastern University), Xiaolin Xu (Northeastern University), Yunsi Fei (Northeastern University)
PAPER
Probe-...
This week on the Lock and Code podcast, we speak with Will Freeman about Automated License Plate Reader (ALPR) surveillance.
A cyberattack has forced a high school in central England to remain closed following the Christmas holidays.
On December 12, 2025, the MongoDB Security Engineering team disclosed a high-severity vulnerability in MongoDB that allows unauthenticated memory disclosure. The issue is tracked as CVE-2025-14847 and has a CVSS score of 8.7 and was quickly nicknamed MongoBleed in the security community due to the w...
The previous two articles deviated substantially from the content within Extreme Privacy, 5th Edition. This is because Apple added many new invasions to your privacy with their latest offering. While Apple devices are extremely secure, even more so than most Android devices in my opinion, this comes...
Much like the previous article, Extreme Privacy, 5th Edition also offered many privacy and security considerations for previous versions of iOS. That content is also pushing two years old now, so I am again overdue for an update. This article revisits that entire section for the recent changes with...
A breach affecting Manage My Health could have exposed sensitive data for up to 120,000 New Zealand patients
In Extreme Privacy, 5th Edition, I offered many privacy and security considerations for macOS. That content is pushing two years old now, so I am probably overdue for an update. This article revisits that entire section for the recent changes within macOS 26. The following assumes you are on macOS...
Ledger is informing some customers that their personal data has been exposed after hackers breached the systems of third-party payment processor Global-e. [...]
With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.
The post CISA KEV Catalog Expanded 20% in 2025, Topping 1,480 Entries appeared first on SecurityWeek.
The Kimwolf botnet has infected over 2 million Android devices, spreading mainly through residential proxy networks, researchers say. The Kimwolf botnet has compromised more than 2 million Android devices, spreading primarily via residential proxy networks, according to cybersecurity firm Synthient....