> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
AUSTIN, Texas, Nov. 18, 2025, CyberNewswire — SpyCloud, the leader in identity threat protection, today released its report, The Identity Security Reckoning: 2025 Lessons, 2026 Predictions, outlining 10 of the top trends that will shape the cyber threat … (more…)
The post News alert: SpyCloud forec...
Today, Fortinet released security updates to patch a new FortiWeb zero-day vulnerability that threat actors are actively exploiting in attacks. [...]
Several security issues were fixed in Lasso.
The malware authors associated with a Phishing-as-a-Service (PhaaS) kit known as Sneaky 2FA have incorporated Browser-in-the-Browser (BitB) functionality into their arsenal, underscoring the continued evolution of such offerings and further making it easier for less-skilled threat actors to mount at...
Regulator sides with telcos that claimed new cybersecurity duties were too ‘burdensome’ The Federal Communications Commission (FCC) will vote this week on whether to scrap Biden-era cybersecurity rules, enacted after the Salt Typhoon attacks came to light in 2024, that required telecom carriers to a...
For the third time in recent months, Google has found itself scrambling to fix a potentially serious zero-day flaw in the Chrome browser’s V8 JavaScript engine.
Addressed on Monday as part of an emergency ‘out-of-band’ patch, the vulnerability identified as CVE-2025-13223 w...
EFF and the ACLU of Northern California Sue on Behalf of Local Nonprofits Contact: Josh Richman, EFF, [email protected]; Carmen King, ACLU of Northern California, [email protected]
SAN JOSE, Calif. – San Jose and its police department routinely violate the California Constitution by conducting warran...
Major online services such as ChatGPT, X, and Shopify were disrupted in a, as well as transit and city services.
The post Cloudflare Outage Not Caused by Cyberattack appeared first on SecurityWeek.
Google has released an update to patch two high-severity vulnerabilities, one of which is already under active exploitation.
Executives and their families have become high-value targets for cyberthreats, and the risks now extend beyond the corporate network. As threat actors leverage easily accessible personal data, organizations face growing challenges in protecting senior leaders whose personal digital lives often fall...
Voting was not disrupted Tuesday by a wave of DDoS incidents affecting political party and government websites in Denmark a day earlier, officials said.
When? Sean Cairncross wouldn't say America is fed up with being the prime target for foreign hackers. So US National Cyber Director Sean Cairncross says Uncle Sam is going on the offensive – he just isn't saying when.…
Seventh Chrome 0-day this year Google pushed an emergency patch on Monday for a high-severity Chrome bug that attackers have already found and exploited in the wild.…
Microsoft announced today that it will integrate Sysmon natively into Windows 11 and Windows Server 2025 next year, making it unnecessary to deploy the standalone Sysinternals tools. [...]
AWS Systems Manager Session Manager is a fully managed service that provides secure, interactive, one-click access to your Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, and virtual machines (VMs) through a browser-based shell or AWS Command Line Interface (AWS CLI), without requ...
Le Contrôleur européen de la protection des données (CEPD) a publié de nouvelles orientations pour aider les responsables du traitement à réaliser des analyses de risques relatives aux systèmes d'intelligence artificielle.Publiées le 11 novembre 2025, ces orientations visent à fournir des recommanda...
Microsoft says that Teams users will be able to report false-positive threat alerts triggered by messages incorrectly flagged as malicious. [...]
L'Agence espagnole de protection des données (AEPD) a publié un guide pratique sur le chiffrement destiné aux travailleurs indépendants et aux petites et moyennes entreprises (PME) afin de les aider à sécuriser les traitements de données personnelles.Ce document fournit des outils et des connaissanc...
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) roumaine a publié une décision de sanction à l'encontre d'un cabinet d'avocat, comprenant le prononcé d'une amende de 20 000 lei (environ 4 024 €), pour des manquements en lien avec l'utilisation de cookie...
The upcoming strategy would contain six “pillars” — with one focused on “shaping adversary behavior” and another on public-private partnerships, Sean Cairncross said.