> TODAY'S SUMMARY (1272 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Microsoft has patched a zero-day vulnerability in Outlook (CVE-2026-124194) that is reportedly being actively exploited. Additionally, a serious vulnerability in Barracuda’s email security gateways could allow attackers root access to the devices. The ransomware attack on Vanderbilt University continues to unfold, with reports of significant data theft. Notably, Google has addressed its eighth Chrome zero-day of the year, emphasizing ongoing exploitation of browser vulnerabilities. Moreover, the rising trend of spyware targeting everyday users is alarming, with attackers increasingly infiltrating personal devices. Finally, a supply chain attack affecting Qubole has compromised sensitive customer data, further underlining the risks associated with third-party services.
|
// AI-powered summary generated at 20:00
Hackers stole names, addresses, dates of birth, and Social Security numbers from the credit report and identity verification services provider.
The post 700Credit Data Breach Impacts 5.8 Million Individuals appeared first on SecurityWeek.
Launching an AI initiative without a robust data strategy and governance framework is a risk many organizations underestimate. Most AI projects often stall, deliver poor...Read More
The post Can Your AI Initiative Count on Your Data Strategy and Governance? appeared first on ISHIR | Custom AI Softwa...
Winter is coming – so it must be time for Sophos X-Ops’ report on this year’s MITRE ATT&CK Enterprise Evaluations
Microsoft has confirmed that the December 2025 security updates are breaking Message Queuing (MSMQ) functionality, affecting enterprise applications and Internet Information Services (IIS) websites. [...]
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Learn why modern SaaS platforms are adopting passwordless authentication to improve security, user experience, and reduce breach risks.
The post Why Modern SaaS Platforms Are Switching to Passwordless Authentication appeared first on Security Boulevard.
Apple has released macOS and iOS updates to patch two WebKit zero-days exploited in an “extremely sophisticated” attack.
The post Apple Patches Two Zero-Days Tied to Mysterious Exploited Chrome Flaw appeared first on SecurityWeek.
OffSec has released Kali Linux 2025.4, a new version of its widely used penetration testing and digital forensics platform. Most of the changes are related to appearance and usability: Kali’s GNOME desktop environment now organizes Kali tools into folders via the app grid, and there’s a shortcut for...
※この記事は自動翻訳されています。正確な内容につきましては原文をご参照ください。 年初、韓国の大手暗号資産取引所のホットウォレットの一つで異常な出金活動が検知されました。約15分間に数百件のトランザクションが実行され、約₩44.5B KRW（3,300万〜3,500万ドル相当）が抜き取られ、同取引所は全ての出金を停止しまし...
Most enterprise breaches no longer begin with a firewall failure or a missed patch. They begin with an exposed identity. Credentials harvested from infostealers. Employee logins are sold on criminal forums. Executive personas impersonated to trigger wire fraud. Customer identities stitched together...
Classé N°1 dans 66 rapports globaux.
A list of topics we covered in the week of December 8 to December 14 of 2025
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information. Google is aware that an exploit for CVE-2025-14174 exists in the wild.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/2024 ) for more information. Google is aware that an exploit for CVE-2025-14174 exists in the wild.
People are starting to hand more decisions to AI agents, from booking trips to sorting digital files. The idea sounds simple. Tell the agent what you want, then let it work through the steps. The hard part is what the agent does with personal data along the way. A new research study digs into this p...
Bugcrowd unveils AI Triage Assistant and AI Analytics to help security teams proactively defend against AI-driven cyberattacks by accelerating vulnerability analysis, reducing MTTR, and enabling preemptive security decisions.
The post Bugcrowd Puts Defenders on the Offensive With AI Triage Assistan...
Over the last 12 months, security teams continued to walk a tightrope between moving fast to adopt new technologies and facing escalating threats fuelled mostly by the rise of AI. As the year comes to a close, CISOs reflect on some of the takeaways that have shaped the securit...
Kali Linux 2025.4 est disponible ! Cette nouvelle version intègre 3 nouveaux outils et elle apporte des améliorations aux environnements de bureau.
Le post Kali Linux 2025.4 est disponible : quelles sont les nouveautés ? a été publié sur IT-Connect.
Prometheus is an open-source monitoring and alerting system built for environments where services change often and failures can spread fast. For security teams and DevOps engineers, it has become a common way to track system behavior, spot early warning signs, and understand what is happening across...