> TODAY'S SUMMARY (14 articles)
Today's cybersecurity news highlights several critical developments. Scammers are leveraging replies to unsolicited texts to confirm active phone numbers, increasing the risk of fraud. A significant cyberattack utilized 51 AI agents to compromise 429 WordPress sites and steal sensitive Ukrainian data in just over a minute. Additionally, low-cost Android phones are being shipped with pre-installed malware, turning them into tools for ad fraud and other malicious activities. Mozilla has launched Firefox Enterprise, offering enhanced management tools for organizations, while VMware's patch management concerns indicate a growing need for better security tools. Lastly, Booz Allen's AI models successfully navigated all defined attack objectives in a controlled test, showcasing the evolving capabilities of AI in cybersecurity.
|
// AI-powered summary generated at 08:01
An open letter released Wednesday has called for a ban on the development of artificial intelligence systems considered to be “superintelligent” until there is broad scientific consensus that such technologies can be created both safely and in a manner the public supports. The statement, issued by...
The latest Microsoft Digital Defense Report 2025 paints a vivid picture of a cyberthreat landscape in flux. The surge in financially motivated cyberattacks and the persistent risk of nation-state actors demand urgent attention. But for those of us in the Office of the CISO, the real challenge, and o...
A survey of 1,100 cybersecurity and IT professionals published this week finds more than three quarters (76%) report their organization is struggling to keep pace with cyberattacks that have increased in both volume and sophistication. Conducted by the market research firm Vanson Bourne on behalf o...
The add-ons abuse WhatsApp Web to blast bulk messages, sidestepping both Chrome’s extension policies and WhatsApp’s anti-spam rules.
SentinelLABS Researchers have uncovered a new phishing campaign, PhantomCaptcha, targeting aid organizations supporting Ukraine
Ever wonder if you’re talking to a real person online or just another bot? As bots increasingly outnumber humans online, leading to an explosion of deepfakes and AI-driven fraud, one company has a solution straight out of sci-fi: scanning your iris to verify your identity. Today on TechCrunch’s Equ...
State attorneys general are playing a vital role in protecting consumers in the absence of a comprehensive data privacy federal law, researchers found.
Meta has announced new tools to help WhatsApp and Messenger users protect themselves from potential scams and secure their accounts. [...]
The FinWise breach shows that when insider threats strike, encryption is the last line of defense. Penta Security's D.AMO platform unites encryption, key management, and access control to keep sensitive data secure. [...]
When a foundational technology provider like F5 Networks, whose systems power government agencies, critical infrastructure, and enterprises worldwide, suffers a cyber breach, the ripple effects extend far beyond a single organization. This latest attack has once again exposed the growing vulnerabili...
The vulnerability impacts multiple Rust tar parsers, allowing attackers to smuggle additional archive entries.
The post TARmageddon Flaw in Popular Rust Library Leads to RCE appeared first on SecurityWeek.
Here are five ways tenfold's free IGA solution helps you streamline identity governance and access control. Partner Content In a world where one wrong click can set off a catastrophic breach, organizations must control what their users have access to if they want to stop mission-critical assets fro...
Group-IB has uncovered a phishing campaign by Iran-linked MuddyWater, exploiting compromised emails for foreign intelligence
Tenable has been named a Continuous Threat Exposure Management (CTEM) Leader in Latio’s 2025 Cloud Security Market Report. This recognition is based on rigorous product testing conducted by Latio founder and lead analyst James Berthoty.
Key takeaways:
Latio’s 2025 Cloud Security Market Report conf...
Read the latest DFIR news – Microsoft’s ransomware findings, AI’s role in cybercrime, Oxygen’s “Extraction in a Box” training, Cellebrite’s role in a major drug case, and more.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- x86 architecture;
- ACPI drivers;
- Ublk userspace block drive...
6 min readRobust auditing is essential for secure MCP deployments, providing compliance evidence, forensic capabilities, and operational confidence for managing AI agents and context-aware systems at scale. The dynamic nature of MCP makes a lack of visibility dangerous, as attackers can exploit co...
Jewett-Cameron Trading said hackers exfiltrated IT information as well as financial data the company has been gathering over the past few weeks in preparation of filing its annual fiscal report with the SEC.
The Expanding Threat Surface in Third-Party Access No matter how secure an organization’s internal defenses may be, the risk created by third parties cannot be ignored. A single vendor often has connections across dozens of client environments. Financial services firms rely on payment gateways, cred...
Starting yesterday, some of our honeypots received POST requests to "/cgi-bin/webctrl.cgi", attempting to exploit an OS command injection vulnerability: