> TODAY'S SUMMARY (88 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Ivanti has issued an urgent patch for a zero-day vulnerability in its Connect Secure remote access gateway that is actively being exploited. Additionally, Docker disclosed a severe flaw in Docker Hub that allowed attackers to impersonate users and tamper with container images. GitLab patched a maximum-severity vulnerability allowing unauthenticated code execution on its servers. Multiple vulnerabilities in the Linux kernel were also reported, posing risks for local attackers to compromise systems. In broader trends, North Korean hackers are reportedly targeting Ukrainian experts for intelligence, while small AI models are raising concerns about potential self-replication across IoT devices. Finally, a significant cyberattack on French supermarkets caused widespread food spoilage by hijacking refrigeration systems.
|
// AI-powered summary generated at 16:00
Censys announced a new offering designed to help SOC teams accelerate alert triage, reduce mean time to triage (MTTT), and accelerate incident response. The offering delivers near real-time and historical visibility into all internet-facing assets, enabling analysts to quickly enrich context, valida...
The complaint follows several enforcement actions and bans from European data protection authorities which the advocacy group, noyb, alleges Clearview AI has ignored.
The critical-severity flaw allows attackers to smuggle HTTP requests and access sensitive data, modify server files, or cause DoS conditions.
The post QNAP NetBak PC Agent Affected by Recent ASP.NET Core Vulnerability appeared first on SecurityWeek.
A critical security flaw in Microsoft's WSUS feature is being actively exploited in the wild by threat actors who could gain access into unpatched servers, remotely control networks, and use them to deliver malware or do other damage. Microsoft is urging organizations to apply a patch to their syst...
Cobalt has undergone a large-scale expansion of its Cobalt Offensive Security Platform to transform offensive security from ad-hoc tests into a continuous, centrally managed program. The human led, AI-powered platform provides the visibility, control, and efficiency needed to secure organizations, f...
Proton Mail will introduce Category views and Proton Drive will introduce Team Drives. See what other new features Proton has planned for the next several months.
SimSpace provides realistic cyber ranges where organizations can test attack preparedness and validate defenses.
The post SimSpace Raises $39 Million for Cyber Range Platform appeared first on SecurityWeek.
Publication de la mise à jour du référentiel PRIS en version 3.2
anssiadm
mar 28/10/2025 - 14:26
La gestion de crise d’origine cyber devient une activité à part entière du référentiel PRIS.
L’ANSSI met à jour le...
Nozomi Networks announced a cybersecurity solution designed to safely automate threat response in operational environments. With the latest release of Nozomi Arc, users gain automated threat prevention capabilities for OT endpoints. First launched in 2023, Nozomi Arc is the endpoint security and net...
A global deal to fight cybercrime sounds sensible—but critics warn it could expand surveillance and criminalize researchers.
Noyb says New York-based facial recognition biz flouted GDPR orders and kept scraping anyway Privacy advocates at Noyb filed a criminal complaint against Clearview AI for scraping social media users' faces without consent to train its AI algorithms.…
CISOs face increasing personal and criminal liability for improper or incomplete risk management and disclosure during cyber incidents. The SEC, DOJ and international regulators are targeting executives who knowingly omit or distort cyber risk information.
Increasing attack...
Attackers are abusing bidirectional text to make fake URLs look real, reviving a decade-old browser flaw now fueling new phishing tricks. Varonis reveals how the "BiDi Swap" technique works and what organizations need to watch out for. [...]
Palo Alto Networks unveils Prisma AIRS 2.0 and Cortex AgentiX to secure AI applications and automate cybersecurity workflows. With new AI-driven protection, no-code agent building, and integrated threat detection, the company aims to simplify and strengthen enterprise AI security operations.
The po...
Written by: Bhavesh Dhake, Will Silverstone, Matthew Hitchcock, Aaron Fletcher
The Criticality of Privileged Access in Today's Threat Landscape
Privileged access stands as the most critical pathway for adversaries seeking to compromise sensitive systems and data. Its protection is not only a best p...
A new class of Mirai-based DDoS botnets have been launching massive attacks, but their inability to spoof traffic enables device remediation.
The post TurboMirai-Class ‘Aisuru’ Botnet Blamed for 20+ Tbps DDoS Attacks appeared first on SecurityWeek.
CVE-2025-2783, a Chrome zero-day vulnerability that was detected being exploited in March 2025 and was subsequently fixed by Google, was used by unknown attackers to deliver LeetAgent, suspected commercial spyware. An analysis of the malware’s code and the campaign’s infrastructure led Kaspersky res...
Articles related to cyber risk quantification, cyber risk management, and cyber resilience.
The post AI Visibility: The Key to Responsible Governance | Kovrr appeared first on Security Boulevard.
A new malware-as-a-service (MaaS) platform named Atroposia provides cybercriminals a remote access trojan that combines capabilities for persistent access, evasion, data theft, and local vulnerability scanning. [...]
Sublime Security’s Series C funding round brings the total raised by the company to more than $240 million.
The post Sublime Security Raises $150 Million for Email Security Platform appeared first on SecurityWeek.