> TODAY'S SUMMARY (1272 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Microsoft has patched a zero-day vulnerability in Outlook (CVE-2026-124194) that is reportedly being actively exploited. Additionally, a serious vulnerability in Barracuda’s email security gateways could allow attackers root access to the devices. The ransomware attack on Vanderbilt University continues to unfold, with reports of significant data theft. Notably, Google has addressed its eighth Chrome zero-day of the year, emphasizing ongoing exploitation of browser vulnerabilities. Moreover, the rising trend of spyware targeting everyday users is alarming, with attackers increasingly infiltrating personal devices. Finally, a supply chain attack affecting Qubole has compromised sensitive customer data, further underlining the risks associated with third-party services.
|
// AI-powered summary generated at 20:00
All I want for Christmas … is all of your data A new, modular infostealer called SantaStealer, advertised on Telegram with a basic tier priced at $175 per month, promises to make criminals' Christmas dreams come true. It boasts that it can run "fully undetected" even on systems with the "strictest A...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de RECICLAJES LOGROÑO, S.L. (comprenant le prononcé d'une amende de 10 000 €) pour des manquements en lien avec la collecte de copies de documents d'identité et l'information des personnes...
L'Agence Espagnole de Protection des Données a aujourd'hui publié une décision de sanction à l'encontre de OAC LOGÍSTICA, S.L. (comprenant le prononcé d'une amende de 1 200 €) pour des manquements en lien avec la collecte de données de candidats et la confidentialité des communications.Cette affaire...
Zero Trust has become the strategic anchor for modern cybersecurity. Every board is asking for it, every vendor claims to support it, and every CISO is under pressure to make...
The post The Future of Network Security Policy Management in a Zero Trust World appeared first on Security Boulevard.
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre de PROCONO SA,, pour des manquements en lien avec la sécurité des données personnelles.Cette affaire débute par plusieurs réclamations déposées entre le 30 septembre et le 2 octobre 2023, signalant q...
After several disrupted months as House Homeland Security Committee chairman, Rep. Andrew Garbarino made time to discuss cyber issues such as an upcoming Trump administration strategy document and Chinese state-backed threats.
SecureIQLab has officially established its Asia-Pacific (APAC) office in Kathmandu, Nepal, marking a significant milestone in expanding independent cybersecurity validation and advisory services across the region. The new APAC office strengthens SecureIQLab’s ability to support regional enterprises...
Over the past week, enterprise security teams observed a combination of covert malware communication attempts and aggressive probing of publicly exposed infrastructure. These incidents, detected across firewall and endpoint security layers, demonstrate how modern cyber attackers operate simultaneous...
Several security issues were fixed in the Linux kernel.
From open source libraries to AI-powered coding assistants, speed-driven development is introducing new third-party risks that threat actors are increasingly exploiting.
The post From Open Source to OpenAI: The Evolution of Third-Party Risk appeared first on SecurityWeek.
The final EFFector of 2025 is here! Just in time to keep you up-to-date on the latests happenings in the fight for privacy and free speech online.
In this latest issue, we're sharing how to spot sneaky ALPR cameras at the U.S. border, covering a host of new resources on age verification laws, and ex...
Whether you’re generating data from scratch or transforming sensitive production data, performant test data generators are critical tools for achieving compliance in development workflows.
The post How test data generators support compliance and data privacy appeared first on Security Boulevard.
With over $2.17 billion stolen from cryptocurrency services in the first half of 2025, protecting decentralized finance and web3 protocols…
The post Chainalysis Launches Hexagate Security for Blockchain Foundations and Ecosystem Developers appeared first on Chainalysis.
The Texas Attorney General sued five major television manufacturers, accusing them of illegally collecting their users' data by secretly recording what they watch using Automated Content Recognition (ACR) technology. [...]
La Commission Nationale de l'Informatique et des Libertés (CNIL) a lancé l'application mobile FantomApp, destinée aux 10-15 ans pour les aider à protéger leurs données personnelles sur les réseaux sociaux.Développée en collaboration avec des collégiens, l'application propose des outils concrets pour...
L'Agence espagnole de protection des données a publié une décision de sanction à l'encontre du collège Alonai, S.L., comprenant le prononcé d'une amende de 3 000 €, pour des manquements en lien avec son système de vidéosurveillance.Cette affaire débute par une plainte signalant l'installation de cam...
We compared three incidents that surfaced today to show why the impact of a breach depends less on who was hit and more on what was taken.
The surge in AI-driven traffic is transforming how websites manage their content. With AI bots and agents visiting sites at unprecedented rates (often scraping without permission, payment, or attribution) content owners face a critical challenge: how to protect their intellectual property while capi...
Identity systems hold modern life together, yet we barely notice them until they fail. Every time someone starts a new job, crosses a border, or walks into a secure building, an official must answer one deceptively simple question: Is this person really who they claim to be? That single moment—matc...
The browser extension Urban VPN Proxy has been reportedly collecting users’ AI chat conversations