> TODAY'S SUMMARY (53 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A notable authentication bypass vulnerability (CVE-2026-102895) has been identified in GPUStack, raising concerns for users managing AI workloads. Notion has confirmed a data breach affecting chat transcripts linked to its Fireworks AI service, although the impact is limited. Additionally, hackers are exploiting vulnerabilities in ScreenConnect and deploying malware, while a significant number of GitHub repositories have been compromised with credential-stealing payloads. The UK’s NCSC has launched a Cyber Adversary Testing initiative to enhance organizational resilience. Meanwhile, Maersk is facing a $5 million extortion demand following a data breach. Organizations are urged to adopt a proactive security mindset, emphasizing mitigation over traditional patching strategies.
|
// AI-powered summary generated at 12:00
10Critical 147Important 0Moderate 0Low Microsoft addresses 157 CVEs in the first Patch Tuesday release of 2025 and the largest Patch Tuesday update ever with three CVEs exploited in the wild, and five CVEs publicly disclosed prior to patches being made available. Microsoft patched 157 CVEs in its J...
Discover the Blue Shield of California data breach affecting 4.7M members. Learn about the risks and essential security measures to protect your data.
The post Best of 2025: Blue Shield of California Data Breach Exposes 4.7M Members’ Info appeared first on Security Boulevard.
The deal targets device visibility across IT, OT and medical systems as firms adapt to wider attack surfaces driven by AI and connectivity.
The post ServiceNow agrees to buy cyber firm Armis for $7.75B appeared first on CyberScoop.
The post The Engine Behind Santa’s Operation Center (SOC) appeared first on AI Security Automation.
The post The Engine Behind Santa’s Operation Center (SOC) appeared first on Security Boulevard.
Cybersecurity researchers have discovered two malicious Google Chrome extensions with the same name and published by the same developer that come with capabilities to intercept traffic and capture user credentials.
The extensions are advertised as a "multi-location network speed test plug-in" for de...
Rumors of a possible buyout surfaced earlier this month, with the official announcement coming just weeks after Armis announced raising $435 million.
The post ServiceNow to Acquire Armis for $7.75 Billion in Cash appeared first on SecurityWeek.
Explore data sanitization techniques and discover how proper sanitization improves test accuracy, protects privacy, and supports secure software development.
The post How to sanitize production data for use in testing appeared first on Security Boulevard.
Prioritizing what to fix first and why that really matters
Key takeaways
The 97% distraction: Discover why the vast majority of your "Critical" alerts are just theoretical noise, and how focusing strictly on the 3% of findings that represent real, exploitable risk can drastically improve your sec...
Amazon’s chief security officer Stephen Schmidt writes that since April 2024, the company has stopped over 1800 job applications suspected of coming from North Korean agents. The number of applications linked to North Korea has also increased by about 27% per quarter in 2025....
France’s postal service, La Poste, has been largely down for over twelve hours following a widespread network failure, reports The Register.
All of La Poste’s IT systems are reportedly affected, including the website, the digital document service Digiposte, a digital ID ser...
Two Chrome extensions in the Web Store named 'Phantom Shuttle' are posing as plugins for a proxy service to hijack user traffic and steal sensitive data. [...]
Microsoft Teams will automatically enable messaging safety features by default in January to strengthen defenses against content tagged as malicious. [...]
Security firm Proofpoint has discovered that hackers have found a clever way to bypass multi-factor authentication (MFA) and thereby get their hands on accounts belonging to corporate users.
In a nutshell, the hackers are using one-time codes from OAuth 2.0, an open standar...
Outsourcing critical IT and cybersecurity once looked like a shortcut to efficiency. Today, it is a shortcut to systemic fragility.
Breaches at one vendor now cascade across hundreds of organizations. A corporate decision framed as a cost-saving measure can trigger risks th...
Infosecurity has selected some of the key ransomware statistics for 2025
Forensic Focus, in collaboration with Northumbria University, has launched the Forensic Focus International Well-Being Study, inviting current and former Digital Forensic Investigators (DFIs) — and professionals working in digital-forensic environments — to take part in an anonymous online survey ex...
Critical n8n RCE vulnerability enables full server compromise A critical remote code execution flaw in the n8n workflow automation platform, tracked as CVE-2025-68613 (CVSS 9.9), allows authenticated users to inject expressions that escape the workflow sandbox and execute arbitrary OS commands on th...
Malware peddlers are targeting infosec enthusiasts, budding security professionals, and aspiring hackers with the Webrat malware, masquerading the threat as proof-of-concept (PoC) exploits for known vulnerabilities. Delivering the malware The recently uncovered Webrat can steal data from Telegram, D...
A US federal securities class action lawsuit has alleged that South Korean ecommerce giant Coupang took nearly a month to disclose a massive data breach to regulators, violating SEC rules that require companies to report material cybersecurity incidents within four business da...
Hacktivists have scraped almost 100% of the content available on Spotify. Is there anything users need to worry about?