> TODAY'S SUMMARY (1272 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Microsoft has patched a zero-day vulnerability in Outlook (CVE-2026-124194) that is reportedly being actively exploited. Additionally, a serious vulnerability in Barracuda’s email security gateways could allow attackers root access to the devices. The ransomware attack on Vanderbilt University continues to unfold, with reports of significant data theft. Notably, Google has addressed its eighth Chrome zero-day of the year, emphasizing ongoing exploitation of browser vulnerabilities. Moreover, the rising trend of spyware targeting everyday users is alarming, with attackers increasingly infiltrating personal devices. Finally, a supply chain attack affecting Qubole has compromised sensitive customer data, further underlining the risks associated with third-party services.
|
// AI-powered summary generated at 20:00
Memory safety bugs like use-after-free and buffer overflows remain among the most exploited vulnerability classes in production software. While AddressSanitizer (ASan) excels at catching these bugs during development, its performance overhead (2 to 4 times) and security concerns make it unsuitable f...
Several security issues were fixed in the Linux kernel.
Audio streaming service SoundCloud has suffered a breach and has been repeatedly hit by denial of service attacks, the company confirmed on Monday. In the days leading up to the confirmation, users accessing SoundCloud through VPNs reported connection failures and error messages. It has now been rev...
Security researchers have found that Urban VPN Proxy, a widely used free browser VPN extension with millions of installs, has been collecting and exporting full AI chat conversations from users’ browsers.
For organizations where employees routinely paste internal context, c...
A security researcher says a basic website flaw at a photo booth operator may have exposed hundreds of private customer photos.
A security researcher says a basic website flaw at a photo booth operator may have exposed hundreds of private customer photos.
New spy boss says officers must master code alongside tradecraft as agency navigates 'space between peace and war' MI6's new chief Blaise Metreweli outlined her vision for technology-augmented intelligence gathering in her first public speech on 15 December, warning that the UK operates "in a space...
European law enforcement authorities dismantled a fraud network operating call centers in Ukraine that scammed victims across Europe out of more than 10 million euros. [...]
What is the Australian Privacy Act? The Australian Privacy Act 1988 (Cth), commonly referred to as the Privacy Act, is the primary legislation governing the protection of personal information in Australia. It establishes how government agencies and private sector organizations collect, use, store, a...
The issue allows attackers to write arbitrary data to any file, or delete arbitrary files to obtain System privileges.
The post JumpCloud Remote Assist Vulnerability Can Expose Systems to Takeover appeared first on SecurityWeek.
Here at Approov, we always like to look ahead and try to predict what will happen in mobile cybersecurity in the coming year. Mobile app security is an issue which must be taken seriously, and having some insight into key trends is important, in order to be prepared.You can read our prediction...
Learn key insights, risks, and best practices before migrating your app to Ruby on Rails for a smooth, secure, and scalable transition.
The post What You Should Know Before Migrating Your App to Ruby on Rails: Key Insights for a Smooth Transition appeared first on Security Boulevard.
AI-assisted coding and AI app generation platforms have created an unprecedented surge in software development. Companies are now facing rapid growth in both the number of applications and the pace of change within those applications. Security and privacy teams are under significant pressure as the...
Several security issues were fixed in the Linux kernel.
Google will discontinue its dark web report early next year, prompting mixed reactions. How does dark web monitoring actually help keep you safe?
New FOI data reveals UK police well-being standards remain uneven despite rising awareness and clear national guidance.
The coming shift to Post-Quantum Cryptography (PQC) is not a distant, abstract threat—it is the single largest, most complex cryptographic migration in the history of cybersecurity. Major breakthroughs are being made with the technology. Google announced on October 22nd, “research that shows,...
Threat actors have begun to exploit two newly disclosed security flaws in Fortinet FortiGate devices, less than a week after public disclosure.
Cybersecurity company Arctic Wolf said it observed active intrusions involving malicious single sign-on (SSO) logins on FortiGate appliances on December 12,...
SoundCloud said the information of 20% of users was accessed by hackers who breached its systems.
The post User Data Compromised in SoundCloud Hack appeared first on SecurityWeek.
US financial services firm Credit700 has revealed a major data breach impacting 5.8 million people