> TODAY'S SUMMARY (68 articles)
Today's cybersecurity landscape highlights several critical threats and developments. The new Hirudo Android malware is particularly concerning, as it replaces legitimate banking apps to steal credentials while evading security measures. Additionally, Microsoft's October Patch Tuesday saw a record 1,413 vulnerabilities addressed, including a zero-day actively exploited in the wild. Researchers also demonstrated the potential dangers of AI, with one team creating a full-chain Chrome exploit in just six days using public AI models. Meanwhile, fake "Meta Careers" pages are being used to phish Facebook and Google logins, emphasizing the ongoing risk of credential theft. Lastly, a crackdown on North Korean IT farms highlights the geopolitical dimensions of cyber threats.
|
// AI-powered summary generated at 12:01
For the latest discoveries in cyber research for the week of 17th November, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES Cl0p’s Oracle E-Business Suite (CVE-2025-61882) zero-day campaign continues to expand. There are new confirmed breaches at The Washington Post, Logit...
Investigators faced nearly a million data points — explore how SS8 Discovery helped make sense of them.
North Korean Contagious Interview actors now host malware on JSON storage sites to deliver trojanized code projects, NVISO reports. North Korea-linked actors behind the Contagious Interview campaign have updated their tactics, using JSON storage services (e.g. JSON Keeper, JSONsilo, and npoint.io) t...
Discover a step-by-step workflow you can plug directly into your development process
The post Fixing Vulnerabilities Directly in your IDE with Escape MCP appeared first on Security Boulevard.
Does your chatbot know too much? Think twice before you tell your AI companion everything.
Carmaker JLR has posted $639m Q2 losses and a one-off $258m hit after a major ransomware attack
In the Linux kernel, the following vulnerability has been
resolved: net: atlantic: eliminate double free in error handling logic
Driver has a logic leak in ring data allocation/free, where aq_ring_free
could be called multiple times on same ring, if system is under stress and
got memory allocation e...
Fortinet s'est exprimé au sujet de la nouvelle faille zero-day (CVE-2025-64446) découverte dans FortiWeb et déjà exploitée : voici comment se protéger.
The post Fortinet confirme avoir patché une faille zero-day dans FortiWeb : CVE-2025-64446 first appeared on IT-Connect.
RondoDox botnet exploits unpatched XWiki flaw CVE-2025-24893 to gain RCE and infect more servers, despite fixes released in February 2025. RondoDox is targeting unpatched XWiki servers via critical RCE flaw CVE-2025-24893 (CVSS score of 9.8), pulling more devices into its botnet despite patches rele...
Am 18. November 2025 findet der Summit on European Digital Sovereignty in Berlin statt.mr_tigga – shutterstock.com
Bundeskanzler Friedrich Merz (CDU) und Frankreichs Präsident, Emmanuel Macron, haben sich angekündigt zum Treffen der Digitalminister und IT-Fachleute in Berlin...
A list of topics we covered in the week of November 10 to November 16 of 2025
how proper JWT governance helps your organization stay compliant with SOC 2, ISO 27001, and GDPR. Explore best practices, governance frameworks, and how SSOJet ensures secure token management.
The post JWT Governance for SOC 2, ISO 27001, and GDPR — A Complete Guide appeared first on Security Boulev...
In diary entry "Formbook Delivered Through Multiple Scripts", Xavier mentions that the following line:
In this Help Net Security interview, Sev Kelian, CISO and VP of Security at Tecsys, discusses how organizations can strengthen supply chain resilience through a more unified and forward-looking strategy. Kelian also shares how new technologies and a blended view of cyber and physical risk are changi...
CISOs may soon find themselves operating alongside a new colleague, the chief trust officer, as more organizations elevate trust as a business differentiator. With breaches, product safety concerns and uncertainty about AI, trust has taken a battering in the eyes of customers...
Security teams know that application flaws tend to show up at the worst time. Strix presents itself as an open source way to catch them earlier by using autonomous agents that behave like human attackers. These agents run code, explore an application, uncover weaknesses, and prove those findings wit...
ISO certifications, as well as the implementation of an Information Security Management System (ISMS) based on IT baseline protection standards, are seen by many companies as proof of their quality and professional approach to conducting business. While this is an important fo...
Un bug empĂŞche l'installation de la mise Ă jour ESU pour Windows 10 (KB5068781) et retourne une erreur 0x800f0922 (CBS_E_INSTALLERS_FAILED) sur certains PC.
The post Windows 10 KB5068781 : la mise à jour ESU refuse de s’installer avec l’erreur 0x800f0922 ! first appeared on IT-Connect.
Google has disclosed that the company's continued adoption of the Rust programming language in Android has resulted in the number of memory safety vulnerabilities falling below 20% for the first time.
"We adopted Rust for its security and are seeing a 1000x reduction in memory safety vulnerability d...
Do you spend countless hours tracking vulnerabilities in order to keep your software secure? Are you looking for a service to make your job easier by providing relevant, actionable vulnerability alerts? SecAlerts does just that. It saves you valuable time by delivering vulnerability alerts containin...