> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several significant threats and trends. An attacker leveraged 4,837 hijacked GitHub accounts to deploy a secret stealer in over 1,800 repositories, underscoring the risks associated with compromised credentials. Poland's national e-government platform was taken offline following a cyberattack, disrupting public services. A critical vulnerability in Apache HTTP Server's HTTP/2 module could allow remote code execution, emphasizing the need for prompt patching. Additionally, threat actors exploited stolen AI credentials to generate $740,000 in free compute resources, indicating the increasing value of AI tokens in cybercrime. Finally, unauthorized access incidents linked to ScreenConnect affected 288 endpoints across 48 organizations, prompting security measures from ConnectWise.
|
// AI-powered summary generated at 08:00
As cyber threats become more frequent and more complex, they’re causing visible, measurable damage to organizations’ reputations and bottom lines. But the damage doesn’t end there. Breaches — or at least the threat of them — are impacting the mental health of companies’ IT and...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de 4USPORT INSTALLATIONS SPORTIVES, S.L. (comprenant le prononcé d'une amende de 600 €) pour des manquements en lien avec son obligation de coopération.Cette affaire débute par une plainte...
L'Agence Espagnole de Protection des Données a publié une décision de sanction à l'encontre de la Municipalité de San Cristóbal de La Laguna pour ne pas avoir respecté une précédente injonction de l'autorité.Cette affaire fait suite à une précédente décision du 21 juin 2024, par laquelle il avait ét...
Recently, a new "breed" of IP-based KVM devices has been released. In the past, IP-based KVM devices required dedicated "server-grade" hardware using IPMI. They often cost several $100 per server, and are only available for specific systems that support the respective add-on cards. These cards are u...
La Commission Nationale de l'Informatique et des Libertés (CNIL) précise les conditions de déploiement des caméras dites "touristiques" par les communes afin de garantir la protection de la vie privée.Suite à des contrôles, la CNIL a constaté que des caméras installées par des communes à des fins de...
Taiwan’s National Security Agency states that the number of Chinese cyberattacks against the country’s critical infrastructure increased by 6% in 2025, averaging 2.6 million attacks per day, Reuters reports.
The attacks mainly targeted the energy sector, hospitals, banks an...
Hackers have compromised a file transfer system at Sedgwick’s subsidiary that serves government agencies.
The post Sedgwick Confirms Cyberattack on Government Subsidiary appeared first on SecurityWeek.
France and Malaysia have launched investigations against Elon Musk’s AI chatbot Grok, after it generated sexualized deepfakes of women and minors, Techcrunch reports.
India has also demanded that X restrict Grok’s ability to generate “obscene, pornographic or pedophilic” im...
Ilya Lichtenstein, convicted for the 2016 Bitfinex hack, has been released early from prison to home confinement
Popular AI-powered integrated development environment solutions, such as Cursor, Windsurf, Google Antigravity, and Trae, recommend extensions that are non-existent in the OpenVSX registry, allowing threat actors to claim the namespace and upload malicious extensions. [...]
The botnet known as Kimwolf has infected more than 2 million Android devices by tunneling through residential proxy networks, according to findings from Synthient.
"Key actors involved in the Kimwolf botnet are observed monetizing the botnet through app installs, selling residential proxy bandwidth,...
Each month we publish numerous new articles and known issues to the WatchGuard Knowledge Base. Here is the new content published in December.
A new Python-based malware called VVS stealer has been identified, targeting Discord users with stealthy techniques to steal data
Session 7D: ML Security
Authors, Creators & Presenters: Ruyi Ding (Northeastern University), Tong Zhou (Northeastern University), Lili Su (Northeastern University), Aidong Adam Ding (Northeastern University), Xiaolin Xu (Northeastern University), Yunsi Fei (Northeastern University)
PAPER
Probe-...
This week on the Lock and Code podcast, we speak with Will Freeman about Automated License Plate Reader (ALPR) surveillance.
A cyberattack has forced a high school in central England to remain closed following the Christmas holidays.
On December 12, 2025, the MongoDB Security Engineering team disclosed a high-severity vulnerability in MongoDB that allows unauthenticated memory disclosure. The issue is tracked as CVE-2025-14847 and has a CVSS score of 8.7 and was quickly nicknamed MongoBleed in the security community due to the w...
The previous two articles deviated substantially from the content within Extreme Privacy, 5th Edition. This is because Apple added many new invasions to your privacy with their latest offering. While Apple devices are extremely secure, even more so than most Android devices in my opinion, this comes...
Much like the previous article, Extreme Privacy, 5th Edition also offered many privacy and security considerations for previous versions of iOS. That content is also pushing two years old now, so I am again overdue for an update. This article revisits that entire section for the recent changes with...
A breach affecting Manage My Health could have exposed sensitive data for up to 120,000 New Zealand patients