> TODAY'S SUMMARY (141 articles)
Today's cybersecurity landscape highlights significant threats and trends:
1. Microsoft broke its record by patching 1,413 vulnerabilities, including three zero-days currently under active exploitation. This includes critical flaws in Windows and Ivanti Connect Secure, urging immediate updates from users.
2. A supply-chain attack led Ledger to halt sales of its wallets across several Asian countries, raising concerns about hardware security.
3. New malware, Hirudo, is targeting Android users by replacing legitimate banking apps with modified versions to steal credentials.
4. A cyberattack on French supermarkets disrupted refrigeration systems, demonstrating the growing risks associated with IoT devices.
5. Researchers have warned of the potential for AI worms to spread across vulnerable smart devices, indicating a new frontier in cyber threats.
6. The U.S. has disrupted a major phishing ecosystem linked to Chinese cybercriminals, highlighting ongoing international cybercrime efforts.
Organizations are urged to stay vigilant and prioritize patching and security measures amidst these evolving threats.
|
// AI-powered summary generated at 20:00
The upcoming strategy would contain six âpillarsâ â with one focused on âshaping adversary behaviorâ and another on public-private partnerships, Sean Cairncross said.
L'AutoritĂ© suĂ©doise de protection de la vie privĂ©e (IMY) a clĂŽturĂ© son enquĂȘte concernant l'Agence suĂ©doise d'assurance sociale et son utilisation d'un systĂšme d'intelligence artificielle pour la sĂ©lection de contrĂŽles ciblĂ©s.L'enquĂȘte, ouverte en juin 2025 suite Ă des rapports mĂ©diatiques, portait...
One of our most-loved features is Salt Cloud Connect.
In a world of complex deployments, itâs a breath of fresh air: an agentless discovery model that delivers under 10-minute deployment and rapidly gathering API-specific info in cloud platforms. Customers plug it in, and in minutes, not weeks, they...
The national cyber director and a top FBI official shared more details about the forthcoming Trump administration document Tuesday.
The post Completed draft of cyber strategy emphasizes imposing costs, industry partnership appeared first on CyberScoop.
Pajemploi, the French social security service for parents and home-based childcare providers, has suffered a data breach that may have exposed personal information of 1.2 million individuals. [...]
Administrative and technical controls against attacks on corporate browsers via malicious extensions.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2021) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2021) for more information. Google is aware that an exploit for CVE-2025-13223 exists in the wild.
From certified MDR services to open threat intelligence frameworks, Sophos is delivering the clarity, context, and confidence organizations need to stay ahead of evolving threats.
One US cybersecurity leader described the short-term extension of the Cybersecurity Information Sharing Act as a âtemporary patchâ and called for a long-term solution
Why growing SaaS teams migrate from AWS Cognito, Auth0, or WorkOS to SSOJet â a developer-first identity platform with transparent pricing, easy migration, and built-in multi-tenant support.
The post Why SSOJet Is a Strong Choice for Teams Migrating from AWS Cognito, Auth0, or WorkOS appeared first...
Britainâs domestic intelligence agency warned that Chinese nationals were âusing LinkedIn profiles to conduct outreach at scaleâ on behalf of the Chinese Ministry of State Security.
The post MI5 Warns Lawmakers That Chinese Spies Are Trying to Reach Them via LinkedIn appeared first on SecurityWeek.
A survey found businesses inadvertently exposed 3 million sensitive documents this year alone. Learn how to keep your organization's files safe.
Tonic.ai has launched the Fabricate Data Agent to enable you to effortlessly generate hyper-realistic synthetic data in a matter of minutes via agentic AI. Chat your way to the domain-specific data you need, whether thatâs a relational database, JSON, unstructured files like PDFs, and more.
The post...
Orem, United States, 18th November 2025, CyberNewsWire
The post SecurityMetrics Wins âData Leak Detection Solution of the Yearâ in 2025 CyberSecurity Breakthrough Awards Program appeared first on Security Boulevard.
A new malware campaign has been observed built on seven npm packages and using cloaking techniques and fake CAPTCHAs, operated by threat actor dino_reborn
At Microsoft Ignite 2025, we are not just announcing new featuresâwe are redefining whatâs possible, empowering security teams to shift from reactive responses to proactive strategies.
The post Agents built into your workflow: Get Security Copilot with Microsoft 365 E5 appeared first on Microsoft Se...
In the agentic era, security must be ambient and autonomous, like the AI it protects. This is our vision for security, where security becomes the core primitive.
The post ââAmbient and autonomous security for the agentic eraââ appeared first on Microsoft Security Blog.
SESSION
Session 3B: Wireless, Cellular & Satellite Security
-----------
-----------
Authors, Creators & Presenters: Jiska Classen (Hasso Plattner Institute, University of Potsdam), Alexander Heinrich (TU Darmstadt, Germany), Fabian Portner (TU Darmstadt, Germany), Felix Rohrbach (TU Darmstad...
SESSION
Session 3B: Wireless, Cellular & Satellite Security
-----------
-----------
Authors, Creators & Presenters: Philipp Mackensen (Ruhr University Bochum), Paul Staat (Max Planck Institute for Security and Privacy), Stefan Roth (Ruhr University Bochum), Aydin Sezgin (Ruhr University Boch...