> TODAY'S SUMMARY (44 articles)
Today's cybersecurity landscape reveals significant threats impacting various sectors. A cyberattack targeting refrigeration systems in France has spoiled food across hundreds of supermarkets due to unpatched firmware vulnerabilities. Retail giant Ahold Delhaize has taken its systems offline following a cyber incident, indicating ongoing risks in the retail sector. GitLab has patched a critical vulnerability that could allow unauthenticated remote code execution, emphasizing the importance of timely updates. Additionally, a data breach in Denmark linked to weak passwords has compromised 8.8 million accounts. Emerging malware, such as XWorm RAT, is evolving to offer enhanced surveillance capabilities, posing new risks for user privacy. Lastly, low-cost Android phones are being shipped with pre-installed malware, raising concerns about supply chain security.
|
// AI-powered summary generated at 12:00
It was discovered that the fetchmail SMTP client incorrectly handled
certain status code messages. An attacker controlling a malicious server
could possibly use this issue to cause fetchmail to crash, resulting in a
denial of service.
The security function has often been at odds with the rest of the business. While the latter guns for growth, CISOs have historically been seen as more interested in managing cyber risk than supporting their colleagues. Sometimes this can lead to direct conflict. A 2024 report claims that 79%...
The Cybersecurity & Infrastructure Security Agency (CISA) is warning that hackers are exploiting a critical vulnerability in the Motex Landscope Endpoint Manager. [...]
In a default-deny world, where only verified sources and verified destinations are allowed, which require a successful policy-allowed DNS resolution, many modern threats are mitigated, and there’s demonstrable value in choosing this path, including being able to enforce “My network, my rules” app...
Creating and sharing knowledge are defining traits of humankind, yet copyright law has grown so restrictive that it can require acts of civil disobedience to ensure that students and scholars have the books they need and to preserve swaths of culture from being lost forever.
Reputable research gener...
Secure your multi-tenant SaaS applications with Escape DAST’s powerful multi-user testing and tenant isolation features.
The post Introducing Multi-User Testing with Natural Language Queries in Escape DAST appeared first on Security Boulevard.
Expanded ITDR features—including the new Microsoft Defender for Identity sensor, now generally available—bring improved protection, correlation, and context to help customers modernize their identity defense.
The post Harden your identity defense with improved protection, deeper correlation, and ri...
Microsoft says that the File Explorer (formerly Windows Explorer) now automatically blocks previews for files downloaded from the Internet to block credential theft attacks via malicious documents. [...]
The Cyberspace Solarium Commission says years of progress are being undone amid current administration's cuts America's once-ambitious cyber defences are starting to rust, according to the latest annual report from the US Cyberspace Solarium Commission (CSC), which warns that policy momentum has slo...
The U.S. Department of Justice accused Peter Williams, former general manager of L3Harris’ hacking division Trenchant, of stealing trade secrets and selling them to a buyer in Russia.
Technology that uses video selfies to verify Tinder users will be expanding soon beyond California, the dating app's parent company says.
A cyber-espionage campaign by Pakistan’s TransparentTribe has been identified, targeting Indian government systems using DeskRAT
Threat actors with ties to North Korea have been attributed to a new wave of attacks targeting European companies active in the defense industry as part of a long-running campaign known as Operation Dream Job.
"Some of these [companies' are heavily involved in the unmanned aerial vehicle (UAV) secto...
A hacker group known as Cavalry Werewolf has launched a months-long cyber espionage campaign targeting Russia’s public sector as well as energy, mining and manufacturing companies.
In early September, EFF submitted an amicus brief to Ecuador’s Constitutional Court supporting a constitutional challenge filed by Ecuadorian NGOs, including INREDH and LaLibre. The case challenges the constitutionality of the Ley Orgánica de Inteligencia (LOI) and its implementing regulation, the G...
Author, Creator & Presenter: Dr. Patrick Gage Kelley PhD
Dr. Patrick Gage Kelley is the Head of Research Strategy for Trust & Safety at Google. He has worked on projects that help us better understand how people think about their data and safety online. These include projects on the use and...
ESET Cloud Office Security v645 (Feature release) has been released.
The relationship between the Russian government and cybercriminal groups has evolved from passive tolerance.
The post Russian Government Now Actively Managing Cybercrime Groups: Security Firm appeared first on SecurityWeek.
Check Point researchers have uncovered, mapped and helped set back a stealthy, large-scale malware distribution operation on YouTube they dubbed the “YouTube Ghost Network.” The network published more than 3,000 videos across compromised or fake channels, luring viewers with game cheats, cracked sof...
AI agents now act, decide, and access systems on their own — creating new blind spots Zero Trust can't see. Token Security helps organizations govern AI identities so every agent's access, intent, and action are verified and accountable. [...]