> TODAY'S SUMMARY (53 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A notable authentication bypass vulnerability (CVE-2026-102895) has been identified in GPUStack, raising concerns for users managing AI workloads. Notion has confirmed a data breach affecting chat transcripts linked to its Fireworks AI service, although the impact is limited. Additionally, hackers are exploiting vulnerabilities in ScreenConnect and deploying malware, while a significant number of GitHub repositories have been compromised with credential-stealing payloads. The UK’s NCSC has launched a Cyber Adversary Testing initiative to enhance organizational resilience. Meanwhile, Maersk is facing a $5 million extortion demand following a data breach. Organizations are urged to adopt a proactive security mindset, emphasizing mitigation over traditional patching strategies.
|
// AI-powered summary generated at 12:00
Des hackers ont attaqué le portail de santé Manage My Health le 30 décembre, accédant aux données médicales personnelles de 120 000 personnes et exigeant une rançon de 60 000 $ US. Initialement fixée au 15 janvier, la date limite de paiement a été réduite à 48 heures, et des fichiers très sensibles...
An unauthorized individual accessed files on the network between December 22 and December 30, 2025, which included your name and unspecified data elements. The organization secured its systems, engaged a cybersecurity firm, notified law enforcement, and is providing a complimentary one-year identity...
Coupang, the largest retailer in South Korea, announced $1.17 billion (1.685 trillion Won) total compensation for the 33.7 million customers whose information was exposed in the data breach discovered last month. [...]
Amazingly, Medium has fixed the stats so my blog / podcast quarterly is back to life. As before, this covers both Anton on Security and my posts from Google Cloud blog, Google Cloud community blog, and our Cloud Security Podcast (subscribe on Spotify).
Top 10 posts with the most lifetime views (excl...
U.S. and Australian cyber agencies confirmed that hackers are exploiting a vulnerability impacting data storage systems from the company MongoDB.
How Does Machine Identity Security Foster Confidence in Cybersecurity? Is your organization truly equipped to handle the complexities of machine identity security? While we navigate a rich with digital transformations, the importance of securing non-human identities (NHIs) cannot be overstated. NHIs...
Why Are Non-Human Identities Crucial for Cloud Security? How do organizations ensure robust security when integrating complex technologies like Agentic AI into their infrastructure? This is a pivotal question, especially when considering cloud security and the management of Non-Human Identities (NHI...
The high-severity vulnerability is under active exploitation and affects many versions of MongoDB, a nearly ubiquitous open-source database.
The post MongoBleed defect swirls, stamping out hope of year-end respite appeared first on CyberScoop.
Can Non-Human Identities Enhance Security in High-Risk Environments? One intriguing question is whether Non-Human Identities (NHIs) can effectively reinforce security measures in environments considered high-risk. NHIs, often understood as machine identities, encompass secrets like encrypted passwor...
How Do Non-Human Identities Shape Enterprise Security? What role do Non-Human Identities (NHIs) play in safeguarding enterprise security? With digital evolve, understanding and managing NHIs becomes imperative for organizations seeking robust security measures, especially those operating in cloud en...
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) roumaine a publié une décision de sanction à l'encontre de l'Ordre des infirmiers généralistes, des sages-femmes et des assistants médicaux de Roumanie – Filiale de Neamț, comprenant le prononcé d'une amen...
Some time ago I mentioned that we went through the curl source code and eventually got rid of all strncpy() calls. strncpy() is a weird function with a crappy API. It might not null terminate the destination and it pads the target buffer with zeroes. Quite frankly, most code bases are probably bette...
A ransomware attack hit Romania’s Oltenia Energy Complex on December 26, knocking out IT systems at the country’s largest coal power producer. A ransomware attack disrupted Oltenia Energy Complex, Romania’s largest coal-based power producer, shutting down its IT systems on December 26. The Oltenia E...
There's more where that came from, CEO says Rogue insiders suspected of taking bribes to hand over Coinbase customer records to criminals are beginning to face justice, according to CEO Brian Armstrong.…
KrebsOnSecurity.com celebrates its 16th anniversary today! A huge "thank you" to all of our readers -- newcomers, long-timers and drive-by critics alike. Your engagement this past year here has been tremendous and truly a salve on a handful of dark days. Happily, comeuppance was a strong theme runni...
Session 7C: Secure Protocols
Authors, Creators & Presenters: Xuanji Meng (Tsinghua University), Xiao Sui (Shandong University), Zhaoxin Yang (Tsinghua University), Kang Rong (Blockchain Platform Division，Ant Group), Wenbo Xu (Blockchain Platform Division，Ant Group), Shenglong Chen (Blockchain...
Two banks have informed regulators in Maine that recent data breaches were sourced back to a cyberattack on Marquis Software.
A Lithuanian national has been arrested for his alleged involvement in infecting 2.8 million systems with clipboard-stealing malware disguised as the KMSAuto tool for illegally activating Windows and Office software. [...]
Extortion group Lovely claims to have stolen 40 million pieces of info from publisher Conde Nast A criminal group is beating Conde Nast over the head for not responding sooner to its extortion attempt by posting stolen subscribers' email and home addresses and warning the publisher of Wired, The New...
A high-severity flaw in MongoDB instances could allow unauthenticated remote bad actors to leak sensitive data from MongoDB servers. Dubbed "MongoBleed," the security flaw is being exploited in the wild after a PoC exploit and technical details were published. MongoDB has released patches to protec...