> TODAY'S SUMMARY (53 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A notable authentication bypass vulnerability (CVE-2026-102895) has been identified in GPUStack, raising concerns for users managing AI workloads. Notion has confirmed a data breach affecting chat transcripts linked to its Fireworks AI service, although the impact is limited. Additionally, hackers are exploiting vulnerabilities in ScreenConnect and deploying malware, while a significant number of GitHub repositories have been compromised with credential-stealing payloads. The UK’s NCSC has launched a Cyber Adversary Testing initiative to enhance organizational resilience. Meanwhile, Maersk is facing a $5 million extortion demand following a data breach. Organizations are urged to adopt a proactive security mindset, emphasizing mitigation over traditional patching strategies.
|
// AI-powered summary generated at 12:00
The Clop ransomware gang has stolen the data of nearly 3.5 million University of Phoenix (UoPX) students, staff, and suppliers after breaching the university's network in August. [...]
Anna’s Archive, c'est le nom d'un collectif qui affirme être parvenu à sauvegarder la quasi-totalité de la bibliothèque musicale de Spotify : 300 To de données.
Le post Anna’s Archive a aspiré tout le catalogue de Spotify : 86 millions de fichiers audio volés ! a été publié sur IT-Connect.
Banque Postale : accès aux comptes perturbé le 22 décembre, DDoS évoqué ; BPCE aussi touché par des incidents techniques....
A feature update of ESET Mail Security for Microsoft Exchange Server 12.1.10007.0 has been released.
Coupang disclosed a data breach affecting 33.7 million customers after unauthorized access to personal data went undetected for nearly five months. Penta Security explains how the incident highlights insider credential abuse risks and why encrypting customer data beyond legal requirements can reduce...
Fresh off a series of recent attacks targeting major retail companies in the United States and the UK, the notorious Scattered Spider cybercrime group is now targeting insurance companies, and earlier this month apparently bagged a high-profile victim in Aflac. The intrusion in Aflac, which was det...
Physical data center maintenance is risky on a global network. We built a maintenance scheduler on Workers to safely plan disruptive operations, while solving scaling challenges by viewing the state of our infrastructure through a graph interface on top of multiple data sources and metrics pipelines...
The suspects are leaders and members of the Venezuelan crime syndicate Tren de Aragua.
The post 54 Charged in US Over ATM Attacks Involving ‘Ploutus’ Malware appeared first on SecurityWeek.
Users affected by the data breach may be contacted directly by cybercriminals, Pornhub warns.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Workstations and servers at Romania's water agency have been disrupted by a ransomware incident, but officials said critical infrastructure was still operating normally.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
A recent MacSync Stealer version no longer requires users to directly interact with the terminal for execution.
The post MacSync macOS Malware Distributed via Signed Swift Application appeared first on SecurityWeek.
Un développeur embauché par Amazon, mais qui opérait en réalité pour la Corée du Nord, a été démasqué grâce à la latence anormale de ses frappes au clavier.
Le post Comment Amazon a repéré un faux développeur grâce à un « lag » de 110 ms ? a été publié sur IT-Connect.
Pour Noël 2025, BLUETTI propose des remises sur ses stations de charge électrique et sur le tout nouveau modèle : l'Elite 100 V2 Bio-based. Voici les offres.
Le post Noël chez BLUETTI : jusqu’à 46% de réduction et lancement de la station Elite 100 V2 Bio-based a été publié sur IT-Connect.
For the latest discoveries in cyber research for the week of 22nd December, please download our Threat Intelligence Bulletin. TOP ATTACKS AND BREACHES An adult content platform PornHub has disclosed a data breach linked to analytics provider Mixpanel. The breach exposed more than 200 million records...
A recent upgrade to the RansomHouse ransomware operation has added new concerns for enterprise defenders, introducing a multi-layered encryption update to the group’s double-extortion RaaS model.
Also tracked under the cluster Jolly Scorpius, the ransomware gang has transit...
The cybersecurity startup will use the funds to accelerate platform improvements, global expansion, and partnerships.
The post Gambit Cyber Raises $3.4 Million in Seed Funding appeared first on SecurityWeek.