> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends. Weak SQL Server passwords have been exploited to deploy cryptominers and Gh0st RAT, emphasizing the need for stronger credential management. A critical remote code execution vulnerability (CVE-2026-119618) in Apache's HTTP/2 module has been patched, affecting numerous servers. The WhiteArmor gang has claimed responsibility for a data breach at shipping giant Maersk, demanding a $5 million ransom for the stolen data. Additionally, law enforcement has dismantled the infrastructure behind Gootloader, CastleRAT, and StealC malware operations, recovering over 6 million stolen credentials. As cyber threats evolve, organizations must adopt proactive security measures and stay updated on vulnerabilities within their systems.
|
// AI-powered summary generated at 16:00
Cisco disclosed that a China-linked hacking group exploited a previously unknown vulnerability in its email security products, allowing attackers to compromise systems that sit at the center of enterprise email traffic. The flaw affected Cisco Secure Email Gateway and Secure Email and Web Manager ap...
Key Takeaways Risk management in banking depends on how effectively information moves through established structures. A persistent challenge is how early emerging signals are recognized, how consistently they’re interpreted across teams, and how directly they inform decisions. AI and advanced analyt...
Some lawmakers and executives say the era of AI-hacking has arrived, while other experts are pointing out the tools of today still fall short in important ways. Â
The post Policymakers grapple with fallout from Chinese AI-enabled hack appeared first on CyberScoop.
Cisco has yet to release a patch for the actively exploited vulnerability, and attacks have been underway since at least late November.
The post Cisco customers hit by fresh wave of zero-day attacks from China-linked APT appeared first on CyberScoop.
Austria's Supreme Court ruled that Meta’s personalized advertising model is illegal — a ruling that will set legal precedent across the European Union.
RegScale this week added an open source hub through which organizations can collect and organize compliance data based on the Open Security Controls Assessment Language (OSCAL) framework. Announced at the OSCAL Plugfest conference, the OSCAL Hub provides a central repository that makes it simpler f...
What Founders Really See When They Try to Scale
The post Building Cybersecurity Companies from Europe appeared first on Security Boulevard.
Hewlett Packard Enterprise (HPE) fixed a critical OneView flaw that could allow attackers to achieve remote code execution. Hewlett Packard Enterprise (HPE) addressed a maximum-severity security vulnerability, tracked as CVE-2025-37164 (CVSS score of 10.0), in OneView Software. An attacker can explo...
How Can Secrets Rotation Enhance Agentic AI Security? Have you ever contemplated the growing complexity of security? With advanced technologies like Agentic AI revolutionize industries, the critical aspect of securing these systems takes center stage. Managing machine identities, or Non-Human Identi...
How Secure Are Your Non-Human Identities in the Face of Secrets Sprawl? Is secrets sprawl silently jeopardizing your organization’s cybersecurity framework? This pressing question is becoming more common among cybersecurity professionals tasked with safeguarding Non-Human Identities (NHIs). With tec...
L'autorité de protection des données française (CNIL) a publié cinq décisions de sanction à l'encontre de candidats aux élections européennes et législatives de 2024, comprenant le prononcé d'une amende cumulée de 23 500 €, pour des manquements en lien avec l'envoi de messages de prospection politiq...
How Do Non-Human Identities Enhance Cybersecurity? What role do Non-Human Identities (NHIs) play in strengthening cybersecurity frameworks? With data management experts and cybersecurity specialists delve deeper into Agentic AI, the management and security of NHIs have become imperative. This elevat...
La Cour de justice de l'Union européenne a précisé les modalités de l'obligation d'information lors de la collecte de données à caractère personnel au moyen de caméras-piétons, la qualifiant de collecte directe.Saisie d'un litige opposant l'autorité suédoise de protection des données à une entrepris...
Fair use is not just an excuse to copy—it’s a pillar of online speech protection, and disregarding it in order to lash out at a critic should have serious consequences. That’s what we told a federal court in Channel 781 News v. Waltham Community Access Corporation, our case fighting copyright abuse...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information.
The group, LongNosedGoblin, has been active since at least September 2023 and was uncovered after researchers detected new malware strains inside the network of a Southeast Asian government last year.
Cary, North Carolina, USA, 18th December 2025, CyberNewsWire
The post INE Security Expands Across Middle East and Asia to Accelerate Cybersecurity Upskilling appeared first on Security Boulevard.
Hackers gained access to an online coding repository belonging to the University of Sydney and stole files with personal information of staff and students. [...]