[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (53 articles)

|

// AI-powered summary generated at 12:00

> Ransomware’s new playbook is chaos
Ransomware threats are accelerating in scale, sophistication, and impact. Data reveals how evolving techniques, shifting payment trends, and AI-driven capabilities are reshaping the threat landscape, and raising the stakes for every organization. The weekend is prime time for ransomware Over half of...
> Hong Kong’s newest anti-scam technology is over-the-counter banking
Funds in ‘Money Safe’ accounts are only available when customers appear for face-to-face verification Hong Kong’s banks have a new weapon against scams: Accounts that require customers to visit a branch to access their funds.…
> Daran scheitert Passwordless
srcset="https://b2b-contenthub.com/wp-content/uploads/2025/11/Roman-Samborskyi_shutterstock_2425433469_16z9.jpg?quality=50&strip=all 8256w, https://b2b-contenthub.com/wp-content/uploads/2025/11/Roman-Samborskyi_shutterstock_2425433469_16z9.jpg?resize=300%2C168&quality=...
> Cybercrime Inc.: Wenn Hacker besser organsiert sind als die IT
Cybercrime hat sich zur organisierten Industrie mit Arbeitsteilung gewandelt. DC Studio – Shutterstock.com Was einst in Foren mit selbstgeschriebenen Schadcodes begann, hat sich zu einer global vernetzten Untergrundökonomie entwickelt, die in Effizienz, Geschwindigkeit und S...
> NSFOCUS Monthly APT Insights – November 2025
Regional APT Threat Situation In November 2025, the global threat hunting system of Fuying Lab detected a total of 28 APT attack activities. These activities were primarily concentrated in regions including South Asia and East Asia, with a smaller portion also found in Eastern Europe and Middle East...
> External Attack Surface Management (EASM): Mit diesen vier Schritten minimieren Sie das Cyberrisiko
IT-Security-Verantwortliche sollten die Angriffsfläche permanent analysieren und schützen. Dazu müssen sie stets im Blick haben, welche Assets über das Internet erreichbar sind. Foto: NicoElNino – shutterstock.comVon IoT-Devices über Cloud-basierte Infrastrukturen, Web-Appl...
> So geht Post-Incident Review
Post-Incident Reviews können dazu beitragen, die richtigen Lehren aus Sicherheitsvorfällen zu ziehen – wenn sie richtig aufgesetzt sind.dotshock | shutterstock.com Angenommen, Ihr Unternehmen wird von Cyberkriminellen angegriffen, kommt dabei aber mit einem blauen Auge davon...
> Cybersecurity pros admit to moonlighting as ransomware scum
Pair became ALPHV affiliates to prey on US-based clients A ransomware negotiator and a security incident response manager have admitted to running ransomware attacks.…
> CVE-2021-44964 Use after free in garbage collector and finalizer of lgc.c in Lua interpreter 5.4.0~5.4.3 allows attackers to perform Sandbox Escape via a crafted script file.
Information published.
> CVE-2025-14180 NULL Pointer Dereference in PDO quoting
Information published.
> New York’s incoming mayor bans Raspberry Pi at his inauguration party
Zohran Mamdani appears not to understand that smartphones can be used for evil New York’s mayor-elect Zohran Mamdani has invited the city’s residents to join him at a block party to celebrate his inauguration but told attendees not to bring a Raspberry Pi to the event.…
> CVE-2025-14177 Information Leak of Memory in getimagesize
Information published.
> CVE-2025-14178 Heap buffer overflow in array_merge()
Information published.
> PQC-Hardened Model Context Protocol Transport Layer Security
Learn how to secure Model Context Protocol (MCP) using Post-Quantum Cryptography (PQC) to protect AI infrastructure from future quantum computing threats. The post PQC-Hardened Model Context Protocol Transport Layer Security appeared first on Security Boulevard.
> How to Prevent Credential Stuffing Attacks: Detection & Protection Strategies
Learn how to stop credential stuffing attacks with advanced detection and protection strategies for Enterprise SSO and CIAM solutions. The post How to Prevent Credential Stuffing Attacks: Detection & Protection Strategies appeared first on Security Boulevard.
> Multiples vulnérabilités dans Moxa NPort (31 décembre 2025)
De multiples vulnérabilités ont été découvertes dans Moxa NPort. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à l'intégrité des données.
> Risk-Based User Sign-In Protection Strategies
Learn how to implement risk-based user sign-in protection strategies. Explore adaptive mfa, contextual signals, and ciam best practices for secure software development. The post Risk-Based User Sign-In Protection Strategies appeared first on Security Boulevard.
> Aurora College
Aurora College a suspendu les cours pour au moins une semaine après une attaque informatique pendant les vacances. Les classes en personne et en ligne sont suspendues pour la semaine du 5 au 9 janvier. Le collège travaille à la remédiation et à la récupération de ses systèmes.
> Universidad Nacional Autónoma de México (UNAM)
L'Universidad Nacional Autónoma de México a détecté et contenu une cyberattaque visant cinq de ses systèmes informatiques pendant la période de vacances d'hiver. L'institution a confirmé l'activation de protocoles de sécurité et l'absence de fuite de données suite à l'incident. La détection rapide e...
> What innovations are driving secure NHI management
What Makes NHI Management a Crucial Component in Cybersecurity? Have you ever wondered why Non-Human Identity (NHI) management is a fundamental part of robust cybersecurity frameworks? With the increasing reliance on digital solutions across various industries, managing machine identities and their...