> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends. Weak SQL Server passwords have been exploited to deploy cryptominers and Gh0st RAT, emphasizing the need for stronger credential management. A critical remote code execution vulnerability (CVE-2026-119618) in Apache's HTTP/2 module has been patched, affecting numerous servers. The WhiteArmor gang has claimed responsibility for a data breach at shipping giant Maersk, demanding a $5 million ransom for the stolen data. Additionally, law enforcement has dismantled the infrastructure behind Gootloader, CastleRAT, and StealC malware operations, recovering over 6 million stolen credentials. As cyber threats evolve, organizations must adopt proactive security measures and stay updated on vulnerabilities within their systems.
|
// AI-powered summary generated at 16:00
Information published.
Information published.
State legislatures—from Olympia, WA, to Honolulu, HI, to Tallahassee, FL, and everywhere in between—kept EFF’s state legislative team busy throughout 2025.
We saw some great wins and steps forward this year. Washington became the eighth state to enshrine the right to repair. Several states stepped u...
Information published.
Information published.
Audio streaming platform SoundCloud has confirmed that outages and VPN connection issues over the past few days were caused by a security breach in which threat actors stole a database containing user information. [...]
Information published.
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
Explore how AI-driven threat detection can secure Model Context Protocol (MCP) deployments from data manipulation attempts, with a focus on post-quantum security.
The post AI-powered threat detection for MCP data manipulation attempts appeared first on Security Boulevard.
Summar Employee Portal 3.98.0 - Authenticated SQL Injection
esm-dev 136 - Path Traversal
De multiples vulnérabilités ont été découvertes dans Tenable Nessus. Elles permettent à un attaquant de provoquer un déni de service à distance et une atteinte à l'intégrité des données.
De multiples vulnérabilités ont été découvertes dans Moodle. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, une injection de code indirecte à distance (XSS) et un contournement de la politique de sécurité.
Le bureau de l'Ombudsman a subi une attaque de ransomware, les systèmes ont été désactivés pour minimiser les dommages. Une enquête forensique est en cours avec l'aide du Centre national de cybersécurité et des spécialistes externes. Le bureau travaille à rétablir les services en toute sécurité et à ...
Une vulnérabilité a été découverte dans Trend Micro Apex One. Elle permet à un attaquant de provoquer une exécution de code arbitraire.
On December 16, 2025, Red Hat announced the acquisition of Chatterbox Labs, a pioneer in model-agnostic AI safety and generative AI (gen AI) guardrails.The following questions and answers provide additional context on the acquisition and what it means for Red Hat customers and partners.The Announcem...
2025 was an incredible year for network operations (NetOps) and Red Hat Ansible Automation Platform. To address growing network complexity, Red Hat provided the tools NetOps teams needed to implement a strategic automation approach. Through major platform releases, new partner integrations, and glob...
The Center for Advanced Eye Care suffered a data security incident where unauthorized access to protected health information occurred. The incident was discovered on December 16, 2025, and the affected individuals were notified on February 19, 2026. The breach may have resulted in the unauthorized a...
IMA Diligence Services, LLC suffered a data breach due to unauthorized access to a legacy server managed by a third-party. The incident occurred between December 8, 2025, and December 16, 2025, and potentially impacted 1464 Rhode Island residents. A cyberattack was claimed by Genesis on January 27,...
Official AppOmni Company Information AppOmni delivers continuous SaaS security posture management, threat detection, and vital security insights into SaaS applications. Uncover hidden risks, prevent data exposure, and gain total control over your SaaS environments with an all-in-one platform. AppOmn...