> TODAY'S SUMMARY (4 articles)
Today's cybersecurity highlights include a significant data breach involving СберСпасибо, with 3,288,711 accounts compromised. Microsoft has issued its November 2026 Patch Tuesday update, addressing 1,328 vulnerabilities, including 60 rated as critical, emphasizing the need for urgent patching. Additionally, a critical remote code execution vulnerability has been identified in Ruflo MCP Bridge version 3.16.2, posing serious risks to affected systems. Organizations are advised to prioritize updates and monitor for potential exploitation of these vulnerabilities. Overall, the cybersecurity landscape remains fraught with threats, underscoring the importance of robust security measures.
|
// AI-powered summary generated at 04:00
The software giant ServiceNow announced that it is acquiring the cyber firm Armis for $7.75 billion.
2025 was a stellar year for EFF’s award-winning podcast, “How to Fix the Internet,” as our sixth season focused on the tools and technology of freedom.
It seems like everywhere we turn we see dystopian stories about technology’s impact on our lives and our futures—from tracking-based surveillance c...
Earlier this year, both chambers of Congress passed the TAKE IT DOWN Act. This bill, while well-intentioned, gives powerful people a new legal tool to force online platforms to remove lawful speech that they simply don't like.
The bill, sponsored by Senate Commerce Chair Ted Cruz (R-TX) and Rep. Ma...
Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that's delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple's Gatekeeper checks.
"Unlike earlier MacSync Stealer variants t...
Microsoft announced that security administrators will soon be able to block external users from sending messages, calls, or meeting invitations to members of their organization via Teams. [...]
The SEC has charged several crypto platforms and investment clubs for defrauding US investors of more than $14m
Session 7A: Network Security 2
Authors, Creators & Presenters: Mahdi Rahimi (KU Leuven), Piyush Kumar Sharma (University of Michigan), Claudia Diaz (KU Leuven)
PAPER
LAMP: Lightweight Approaches For Latency Minimization In Mixnets With Practical Deployment Considerations
Mixnets are a type of a...
The FCC announced a ban on drones and critical components made in foreign countries, citing national security concerns. The U.S. Federal Communications Commission (FCC) said it has banned drones and key components manufactured abroad over national security concerns. The U.S. government said drones c...
A coordinated wave of fake online job ads targeting the Middle East and North Africa has been uncovered, exploiting remote work trends
Crooks used platform to scoop up and store banking credentials for big-money thefts The US says it has shut down a platform used by cybercriminals to break into Americans' bank accounts.…
Central computer systems at French national postal service La Poste were knocked offline Monday in DDoS attack.
The post Pro-Russian Hackers Claim Cyberattack on French Postal Service appeared first on SecurityWeek.
MongoDB has warned IT admins to immediately patch a high-severity vulnerability that can be exploited in remote code execution (RCE) attacks targeting vulnerable servers. [...]
MongoDB has warned IT admins to immediately patch a high-severity memory-read vulnerability that may be exploited by unauthenticated attackers remotely. [...]
Ukrainian National Pleads Guilty in Nefilim Ransomware Conspiracy A 35‑year‑old Ukrainian national admitted guilt in U.S. federal court to conspiracy in deploying Nefilim ransomware against companies in the United States and other countries, causing significant system damage and financial loss. Pros...
Ukrainian Cyber Alliance and Black Owl team up to hack manufacturer of Russian military drones, sources say. Gaskar Group, Russian designer of drones plaguing Ukraine’s skies, is in utter disarray. Or, at least, so says Ukrainian military intelligence. Hacker groups teamed up to steal and delete 5...
SafeBreach researchers developed a zero-click PoC exploit that crashes unpatched Windows Servers using the Windows Lightweight Directory Access Protocol (LDAP) remote code execution vulnerability (CVE-2024-49112).
The post LDAPNightmare: SafeBreach Labs Publishes First Proof-of-Concept Exploit for...
The U.S. government has seized the 'web3adspanels.org' domain and the associated database used by cybercriminals to host bank login credentials stolen in account takeover attacks. [...]
Executive Summary Modern cyberattacks rarely appear as a single, obvious incident. Instead, they manifest as multiple low-level signals across web, endpoint, DNS, cloud, and network telemetry. When analyzed in isolation, these signals may seem benign. When correlated intelligently, they reveal activ...
Holiday phishing is not a “carelessness” problem. It’s a timing problem. One rushed click can have outsized consequences: a stolen password, a compromised account, or malware installed in seconds. During the holidays, attackers count on high volumes of shipping notices, receipts, and travel up...
Italy fined Apple €98.6 million, ruling its App Tracking Transparency feature limited competition in the App Store. Italy’s antitrust authority fined Apple €98.6 million ($116 million) for ruling that its App Tracking Transparency framework restricted competition in the App Store. “The Italian Compe...