> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several significant threats and trends. An attacker leveraged 4,837 hijacked GitHub accounts to deploy a secret stealer in over 1,800 repositories, underscoring the risks associated with compromised credentials. Poland's national e-government platform was taken offline following a cyberattack, disrupting public services. A critical vulnerability in Apache HTTP Server's HTTP/2 module could allow remote code execution, emphasizing the need for prompt patching. Additionally, threat actors exploited stolen AI credentials to generate $740,000 in free compute resources, indicating the increasing value of AI tokens in cybercrime. Finally, unauthorized access incidents linked to ScreenConnect affected 288 endpoints across 48 organizations, prompting security measures from ConnectWise.
|
// AI-powered summary generated at 08:00
A breach affecting Manage My Health could have exposed sensitive data for up to 120,000 New Zealand patients
Ledger is informing some customers that their personal data has been exposed after hackers breached the systems of third-party payment processor Global-e. [...]
With 24 new vulnerabilities known to be exploited by ransomware groups, the list now includes 1,484 software and hardware flaws.
The post CISA KEV Catalog Expanded 20% in 2025, Topping 1,480 Entries appeared first on SecurityWeek.
The Kimwolf botnet has infected over 2 million Android devices, spreading mainly through residential proxy networks, researchers say. The Kimwolf botnet has compromised more than 2 million Android devices, spreading primarily via residential proxy networks, according to cybersecurity firm Synthient....
As agentic AI adoption accelerates, identity is emerging as the primary security challenge. Token Security explains why AI agents behave like a new class of identity and why CISOs must manage their access, lifecycle, and risk. [...]
The European Commission is looking âvery seriouslyâ into taking action against the social media platform X following an incident in which its artificial intelligence tool Grok was used to create sexually explicit images of a minor.
NordVPN denied allegations that its internal Salesforce development servers were breached, saying that cybercriminals obtained "dummy data" from a trial account on a third-party automated testing platform. [...]
Information published.
Several security issues were fixed in WebKitGTK.
It's January 2026, and Google is finding innovative new ways to make one of its services worse Important news for Gmail power users: Google is dropping the feature whereby Gmail can collect mail from other email accounts over POP3.âŠ
Sedgwick Discloses Data Breach After TridentLocker Ransomware Attack Global claims management provider Sedgwick confirmed a cybersecurity incident affecting its federal contractor subsidiary, Sedgwick Government Solutions, after TridentLocker ransomware group claimed to have stolen 3.4GB of data on...
Artificial intelligence is transforming business models and competitive advantage. Leadership teams agree AI matters, but far fewer know how to turn AI potential into real,...Read More
The post What the CEO and C-Suite Must Ask Before Building an AI Enabled Enterprise appeared first on ISHIR | Custo...
You donât lose most cyber battles to code. You lose them to culture: A rushed approval. A silent near-miss. A leader who shrugs at weak signals.
Tools donât fix that. People do, when they understand risk, own it and act with discipline under pressure. That is what the Organ...
Explore a selection of the latest DFIR employment opportunities in this weekâs Forensic Focus jobs round-up.
Several security issues were discovered in the WebKitGTK Web and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could exploit a variety of issues related to web browser security,
including cross-site scripting attacks, denial of service attacks, and
ar...
The year opened without a reset. The same pressure carried over, and in some places it tightened. Systems people assume are boring or stable are showing up in the wrong places. Attacks moved quietly, reused familiar paths, and kept working longer than anyone wants to admit.
This weekâs stories share...
The 2-million-device-strong botnet allows monetization through DDoS attacks, app installs, and the selling of proxy bandwidth.
The post Kimwolf Android Botnet Grows Through Residential Proxy Networks appeared first on SecurityWeek.
Une faille de sécurité critique (référence CVE-2025-68613) a été corrigée dans le célÚbre outil n8n. Quels sont les risques ? Comment se protéger ?
Le post Une faille critique affecte n8n â CVE-2025-68613 : comment se protĂ©ger ? a Ă©tĂ© publiĂ© sur IT-Connect.
For the latest discoveries in cyber research for the week of 5th January, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Two US banks, Artisansâ Bank and VeraBank, disclosed that customer data was exposed in an August ransomware attack on their vendor, Marquis Software. T...
AWS CISO Amy Herzog urges security leaders to invest in visibility and automation to counter increasingly AI-driven cyberattacks in real time.
The post AWS CISO: Need for Continuous Observability is Now Critical appeared first on Security Boulevard.