> TODAY'S SUMMARY (18 articles)
Today's cybersecurity landscape highlights several significant threats and trends. An attacker leveraged 4,837 hijacked GitHub accounts to deploy a secret stealer in over 1,800 repositories, underscoring the risks associated with compromised credentials. Poland's national e-government platform was taken offline following a cyberattack, disrupting public services. A critical vulnerability in Apache HTTP Server's HTTP/2 module could allow remote code execution, emphasizing the need for prompt patching. Additionally, threat actors exploited stolen AI credentials to generate $740,000 in free compute resources, indicating the increasing value of AI tokens in cybercrime. Finally, unauthorized access incidents linked to ScreenConnect affected 288 endpoints across 48 organizations, prompting security measures from ConnectWise.
|
// AI-powered summary generated at 08:00
Having generated content that may violate US child sexual abuse material laws, Grok highlights once again how ineffective AI guardrails can be.
WhatsApp device fingerprinting can be useful in the delivery of sophisticated spyware, but impact is very limited without a zero-day.
The post Researcher Spotlights WhatsApp Metadata Leak as Meta Begins Rolling Out Fixes appeared first on SecurityWeek.
Wired is reporting on Chinese darknet markets on Telegram.
The ecosystem of marketplaces for Chinese-speaking crypto scammers hosted on the messaging service Telegram have now grown to be bigger than ever before, according to a new analysis from the crypto tracing firm Elliptic. Despite a brief drop...
Cybersecurity firm Resecurity says it deliberately lured threat actors linked to Scattered Lapsus$ Hunters (SLH) alliance into a honeypot, after the group claimed that it had hacked the company and stolen internal and client data.
“Understanding that the actor is conducting...
Featuring:
Cybersecurity is being reshaped by forces that extend beyond individual threats or tools. As organizations operate across cloud infrastructure, distributed endpoints, and complex supply chains, security has shifted from a collection of point solutions to a question of architecture, trust...
Government 'incredibly' concerned about breach potentially affecting more than 100,000 patients New Zealand health minister Simeon Brown has ordered a review into the cyberattack at ManageMyHealth, which threatens the data of hundreds of thousands of Kiwis.…
China’s campaign to break into our critical infrastructure and federal government networks is persistent and growing. Beijing is stealing information while also planting tools and maintaining access in key systems, giving it the option to pressure the United States in the future. Russia also continu...
Ilya Lichtenstein, who was sentenced to prison for his role in the Bitfinex hack that occurred in 2016, has been released from prison early. Ilya Lichtenstein (38), convicted for the hack of the cryptocurrency stock exchange Bitfinex in 2016, has been released from prison early. A Trump administrati...
The European Space Agency has said that external servers were recently involved in a security “issue”
The encryption protecting billions of dollars, which experts once called unbreakable, no longer works. Hackers don’t need passwords. They don’t brute-force keys. They simply walk through digital vaults that were supposed to last for decades. This is the future quantum computing is pulling toward us...
New research reveals how ransomware groups like LockBit and Black Basta exploit visibility gaps, leaving security teams struggling to keep pace.
The post Inside 2025’s Top Threat Groups: Why Familiar Actors Still Have the Upper Hand appeared first on Security Boulevard.
Ilya Lichtenstein, who was sentenced to prison last year for money laundering charges in connection with his role in the massive hack of cryptocurrency exchange Bitfinex in 2016, said he has been released early.
In a post shared on X last week, the 38-year-old announced his release, crediting U.S. P...
Stealc malware is an advanced information-stealing malware (infostealer) designed to secretly collect sensitive data from infected systems. Its primary focus is on web browsers, where it extracts saved passwords, cookies, autofill data, and session information. In many cases, it also targets cryptoc...
Silent authentication strengthens security while reducing friction for customers and employees, protecting accounts without disrupting the user experience.
The post Silent Authentication: Redefining Security, Flexibility and Customer Engagement appeared first on Security Boulevard.
TRM Labs says it has recorded $35m drained from users’ wallets following 2022 LastPass breach
Agentic AI is transforming cybersecurity with autonomous reasoning and action—but it also expands the attack surface. Learn how it reshapes enterprise security.
The post Will Agentic AI Hurt or Help Your Security Posture? appeared first on Security Boulevard.
California's DROP Program Changes Everything
The post California’s DROP Program Changes Everything: How B2C Companies Can Eliminate Authentication Liabilities and Meet Global Privacy Compliance with MojoAuth appeared first on Security Boulevard.
En 2026, le support s'arrĂŞtera pour plusieurs produits et composants de chez Microsoft, dont Windows 11 24H2, Office 2021 et PowerShell 7.4 (LTS).
Le post Microsoft : quels sont les produits en fin de support en 2026 ? a été publié sur IT-Connect.
VVS Stealer is a Python-based malware that steals Discord credentials and tokens and has been sold on Telegram since at least April 2025. Palo Alto Networks researchers uncovered VVS Stealer, a Python-based malware that steals Discord credentials and tokens and has been sold on Telegram since at lea...
A list of topics we covered in the week of December 29 2025 to January 4 of 2026