> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends. Weak SQL Server passwords have been exploited to deploy cryptominers and Gh0st RAT, emphasizing the need for stronger credential management. A critical remote code execution vulnerability (CVE-2026-119618) in Apache's HTTP/2 module has been patched, affecting numerous servers. The WhiteArmor gang has claimed responsibility for a data breach at shipping giant Maersk, demanding a $5 million ransom for the stolen data. Additionally, law enforcement has dismantled the infrastructure behind Gootloader, CastleRAT, and StealC malware operations, recovering over 6 million stolen credentials. As cyber threats evolve, organizations must adopt proactive security measures and stay updated on vulnerabilities within their systems.
|
// AI-powered summary generated at 16:00
Petróleos de Venezuela (PDVSA), Venezuela's state-owned oil company, was hit by a cyberattack over the weekend that disrupted its export operations. [...]
Articles related to cyber risk quantification, cyber risk management, and cyber resilience.
The post Communicating AI Risk to the Board With Confidence | Kovrr appeared first on Security Boulevard.
ESET Full Disk Encryption version 2.3.5.0 has been released.
StackHawk is adding Business Logic Testing (BLT) to its AppSec offerings. StackHawk’s BLT automates the detection of critical authorization flaws that account for 34% of security breaches. Business logic flaws, such as broken object level authorization (BOLA) and broken function level authorization...
Ransomware groups are targeting hypervisors to maximize impact, allowing a single breach to encrypt dozens of virtual machines at once. Drawing on real-world incident data, Huntress explains how attackers exploit visibility gaps at the hypervisor layer and outlines steps orgs can take to harden virt...
Closed CISO communities act as an information exchange, advice center, pressure valve, and safe haven from critical oversight.
The post CISO Communities – Cybersecurity’s Secret Weapon appeared first on SecurityWeek.
srcset="https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2594234567.jpg?quality=50&strip=all 16667w, https://b2b-contenthub.com/wp-content/uploads/2025/12/shutterstock_2594234567.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenth...
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
Threats evolve quickly in today's hyper-connected world, but these six core principles that keep networks safe remain surprisingly stable.
Information published.
Information published.
The e-commerce and logistics company was targeted by the RansomHouse ransomware group in October.Â
The post 700,000 Records Compromised in Askul Ransomware Attack appeared first on SecurityWeek.
Information published.
Information published.
Direct navigation -- the act of visiting a website by manually typing a domain name in a web browser -- has never been riskier: A new study finds the vast majority of "parked" domains -- mostly expired or dormant domain names, or common misspellings of popular websites -- are now configured to redir...
Information published.
Information published.
Over the past week, enterprise security teams observed a combination of covert malware communication attempts and aggressive probing of publicly exposed infrastructure. These incidents, detected across firewall and endpoint security layers, demonstrate how modern cyber attackers operate simultaneous...
Information published.
Information published.