> TODAY'S SUMMARY (119 articles)
Today's cybersecurity landscape highlights several critical issues and ongoing threats. Siemens has issued 17 advisories for industrial control systems, while Rockwell has patched a vulnerability in their ArmorBlock devices. Microsoft has set a new record by addressing 1,413 vulnerabilities in its latest Patch Tuesday, including zero-days actively exploited. There is an urgent call from U.S. senators for improved federal AI safety and security measures, as AI systems increasingly become targets for exploitation. A recent cyberattack in France compromised IoT-connected fridges, raising alarms about the vulnerabilities of connected devices. Additionally, the U.S. has intensified efforts against North Korean hackers exploiting remote work setups, culminating in arrests tied to laptop farms. Overall, the surge in vulnerabilities and attacks underscores the need for proactive security measures across industries.
|
// AI-powered summary generated at 16:00
SESSION
Session 3B: Wireless, Cellular & Satellite Security
-----------
-----------
Authors, Creators & Presenters: Yangtao Deng (Tsinghua University), Qian Wu (Tsinghua University), Zeqi Lai (Tsinghua University), Chenwei Gu (Tsinghua University), Hewu Li (Tsinghua University), Yuanjie Li (...
🎁 Get Ready for Holidaze 2025 — The Ultimate Year-End Giveaway for MSPs! 🎉
The holidays are almost here, and that means one thing: Holidaze 2025 is back and bigger than ever! Channel Program and its sponsors are turning up the cheer with two 🎲 live prize drawings every business day and 💰 t...
The office of Pennsylvania's attorney general has confirmed that the ransomware gang behind an August 2025 cyberattack stole files containing personal and medical information. [...]
This week on the Lock and Code podcast, we speak with Dr. Kristina Rapuano about AI "workslop" and its impact on people and their attitudes.
Law enforcement agency’s referral blitz hit gaming platforms hard, surfacing thousands of extremist URLs Europol's Internet Referral Unit (EU IRU) says a November 13 operation across gaming and "gaming-adjacent" services led its partners to report thousands of URLs hosting terrorist and hate-fueled...
The delivery giant said “no sensitive information” was accessed, and did not specify the number of customers, delivery workers, and merchants who were impacted by the breach.
Cyberattack surfaces in the enterprise have been expanding in both extent and complexity for several years and this sprawl is showing no signs of slowing down.
The trend can be attributed to several factors, including:
The rise of IoT, which has added significantly more...
Readiness metrics have flatlined since 2023, with most sectors slipping backward as teams fumble crisis drills Teams that think they're ready for a major cyber incident are scoring barely 22 percent accuracy and taking more than a day to contain simulated attacks, according to new data out Monday.…
New Immersive report finds cyber resilience and decision making are flatlining
Microsoft is working to resolve a known issue preventing users from installing the Microsoft 365 desktop apps on Windows devices. [...]
Russian Hackers Create 4,300 Fake Travel Sites to Steal Hotel Guests’ Payment Data A Russian-speaking threat behind an ongoing, mass phishing campaign has registered more than 4,300 domain names since the start of the year. The activity, per Netcraft security researcher Andrew Brandt, is designed to...
Logitech, the Swiss multinational electronics and technology company best known for marketing computer peripherals and hardware, has suffered a data breach. “While the investigation is ongoing, at this time Logitech believes that the unauthorized third party used a zero-day vulnerability in a third-...
Jaguar Land Rover says the September 2025 cyberattack halted production, led to data theft, and cost £196M in the quarter. Jaguar Land Rover reported that a September 2025 cyberattack, claimed by Scattered Lapsus$ Hunters, cost the company £196 million in the quarter. In early September, Jaguar Land...
The state-sponsored APT has been targeting the victims’ family members to increase pressure on their targets.
The post Iranian Hackers Target Defense and Government Officials in Ongoing Campaign appeared first on SecurityWeek.
Forscher wollen den ersten großangelegten Cyberangriff entdeckt haben, der von einem KI-Modell ausgeführt wurde.LALAKA – shutterstock.com
Das KI-Unternehmen Anthropic gab kürzlich bekannt, dass Unternehmen weltweit von einer KI-gestützten Spionage-Software attackiert wurden....
Three-time founder Andrew Berman is back with a startup that helps IT ensure business users' AI agents operate securely.
Bringing Replicate’s tools into Cloudflare will continue to make our Workers Platform the best place on the Internet to build and deploy any AI or agentic workflow.
Written by: Mohamed El-Banna, Daniel Lee, Mike Stokkel, Josh Goddard
Overview
Last year, Mandiant published a blog post highlighting suspected Iran-nexus espionage activity targeting the aerospace, aviation, and defense industries in the Middle East. In this follow-up post, Mandiant discusses addit...
A copyright violation sounds serious, so cybercriminals are faking messages from the DMCA to lure you into handing over your X credentials.
Synack has announced Sara Pentest, a new agentic AI product built on the Synack Autonomous Red Agent (Sara) architecture. Sara Pentest performs penetration testing on hosts and web applications, speeding up vulnerability detection and remediation and reducing the window of exposure from months to da...