> TODAY'S SUMMARY (53 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A notable authentication bypass vulnerability (CVE-2026-102895) has been identified in GPUStack, raising concerns for users managing AI workloads. Notion has confirmed a data breach affecting chat transcripts linked to its Fireworks AI service, although the impact is limited. Additionally, hackers are exploiting vulnerabilities in ScreenConnect and deploying malware, while a significant number of GitHub repositories have been compromised with credential-stealing payloads. The UK’s NCSC has launched a Cyber Adversary Testing initiative to enhance organizational resilience. Meanwhile, Maersk is facing a $5 million extortion demand following a data breach. Organizations are urged to adopt a proactive security mindset, emphasizing mitigation over traditional patching strategies.
|
// AI-powered summary generated at 12:00
The National Institute of Standards and Technology (NIST) has released a long-awaited update to its incident response guidance: Special Publication 800-61 Revision 3 (SP 800-61r3). This new version, titled “Incident Response Recommendations and Considerations for Cybersecurity Risk Management,” alig...
In this special edition, Tenable leaders forecast key 2026 trends, including: AI will make attacks more plentiful and less costly; machine identities will become the top cloud risk; preemptive cloud and exposure management will dethrone runtime detection; and automated remediation gets the go-ahead....
The threat actor known as Transparent Tribe has been attributed to a fresh set of attacks targeting Indian governmental, academic, and strategic entities with a remote access trojan (RAT) that grants them persistent control over compromised hosts.
"The campaign employs deceptive delivery techniques,...
Bélarus : démantèlement d’une plateforme financière du cybercrime, 29 millions d'euros saisis, arrestations et coopération internationale....
Secure your network, manage team credentials and block phishing attacks with a single plan for businesses of all sizes. Get a free trial.
Décembre 2025 : 25 victimes françaises recensées, pic de ransomware le 26 décembre, lecture par groupe et par date....
Researchers uncovered a phishing campaign abusing Google Cloud Application Integration to send emails posing as legitimate Google messages. Check Point researchers have revealed a phishing campaign that abuses Google Cloud Application Integration to send emails impersonating legitimate Google messag...
Gavin Webb orchestrated Operation Cronos as it pulled off the legendary disruption sting A senior British crimefighter has been awarded one of the country's highest tributes for public service for his role in the 2024 LockBit ransomware takedown.…
Two cybersecurity professionals charged with running a ransomware operation have pleaded guilty to conspiring to obstruct, delay, or affect commerce through extortion.
They will be sentenced on March 12, 2026, the US Department of Justice announced this week.
Ryan Goldbe...
Ryan Goldberg and Kevin Martin have admitted being affiliates of the BlackCat/Alphv ransomware group.
The post Two US Cybersecurity Pros Plead Guilty Over Ransomware Attacks appeared first on SecurityWeek.
404 Media has the story:
Unlike many of Flock’s cameras, which are designed to capture license plates as people drive by, Flock’s Condor cameras are pan-tilt-zoom (PTZ) cameras designed to record and track people, not vehicles. Condor cameras can be set to automatically zoom in on people’s faces as...
Le salaire d'un député détourné via FoVI, une fraude au président qui aurait pu être évitée depuis des années !...
Arnaque JOTT : faux site en tête de Google, paiement sans confirmation, mail suspect. ZATAZ vous dévoile l'arnaque....
Attack Surface Management (ASM) tools promise reduced risk. What they usually deliver is more information.Â
Security teams deploy ASM, asset inventories grow, alerts start flowing, and dashboards fill up. There is visible activity and measurable output. But when leadership asks a simple question, “I...
In December, the botnet’s operators focused on weaponizing the flaw to compromise vulnerable Next.js servers.
The post RondoDox Botnet Exploiting React2Shell Vulnerability appeared first on SecurityWeek.
VVS stealer (or VVS $tealer) is a Python-based infostealer targeting Discord users. It employs Pyarmor for obfuscation, contributing to its efficacy.
The post VVS Discord Stealer Using Pyarmor for Obfuscation and Detection Evasion appeared first on Unit 42.
The tactics behind protest policing are changing—from one of cooperation to intentional antagonism for political marketing purposes.
Ardennes : contrôle ANFR des talkies-walkies à la chasse, rappel des délits CPCE et du risque de brouillage et déni de service....
Introduction: Why MSSPs Need a New Security Backbone Managed Security Service Providers (MSSPs) are operating in one of the most demanding environments in cybersecurity today. They are expected to defend multiple organizations simultaneously, across different industries, infrastructures, and threat...
The Qilin ransomware group hacked the healthcare organization and stole data from its systems in May 2025.Â
The post Covenant Health Data Breach Impacts 478,000 Individuals appeared first on SecurityWeek.