> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends. Weak SQL Server passwords have been exploited to deploy cryptominers and Gh0st RAT, emphasizing the need for stronger credential management. A critical remote code execution vulnerability (CVE-2026-119618) in Apache's HTTP/2 module has been patched, affecting numerous servers. The WhiteArmor gang has claimed responsibility for a data breach at shipping giant Maersk, demanding a $5 million ransom for the stolen data. Additionally, law enforcement has dismantled the infrastructure behind Gootloader, CastleRAT, and StealC malware operations, recovering over 6 million stolen credentials. As cyber threats evolve, organizations must adopt proactive security measures and stay updated on vulnerabilities within their systems.
|
// AI-powered summary generated at 16:00
Several security issues were fixed in the Linux kernel.
Amazon Web Services (AWS) today published a report detailing a series of cyberattacks occurring over multiple years attributable to Russia’s Main Intelligence Directorate (GRU) that were aimed primarily at the energy sector in North America, Europe and the Middle East. The latest Amazon Threat Inte...
AWS incident response operates around the clock to protect our customers, the AWS Cloud, and the AWS global infrastructure. Through that work, we learn from a variety of issues and spot unique trends. Over the past few months, high-profile software supply chain threat campaigns involving third party...
It was discovered that improper initialization of CPU cache memory could
allow a local attacker with hypervisor access to overwrite SEV-SNP guest
memory resulting in loss of data integrity. (CVE-2024-36331)
Jean-Claude Graf, Sandro RĂĽegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux k...
Executive Summary On December 5th, 2025 the US’s Cybersecurity and Infrastructure Security Agency (CISA), National Security Agency, and Canada’s Cyber Security Centre released a joint malware report on BRICKSTORM, a backdoor targeting VMware vSphere and Windows environments. The suspected threat act...
A detailed guide on detecting and responding to forgotten and outdated servers, API endpoints, user accounts, websites, and other IT assets.
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Session 6A: LLM Privacy and Usable Privacy
Authors, Creators & Presenters: Guanlong Wu (Southern University of Science and Technology), Zheng Zhang (ByteDance Inc.), Yao Zhang (ByteDance Inc.), Weili Wang (Southern University of Science and Technolog), Jianyu Niu (Southern University of Science...
Several security issues were fixed in the Linux kernel.
“Start by doing what’s necessary; then do what’s possible; and suddenly you are doing the impossible.” – St. Francis of Assisi In the 12th century, St. Francis wasn’t talking about digital systems, but his advice remains startlingly relevant for today’s AI governance challenges. Enterprises are sudd...
CVE-2025-55182 (also referred to as React2Shell and includes CVE-2025-66478, which was merged into it) is a critical pre-authentication remote code execution (RCE) vulnerability affecting React Server Components and related frameworks.
The post Defending against the CVE-2025-55182 (React2Shell) vuln...
As we conclude 2025, Amazon Threat Intelligence is sharing insights about a years-long Russian state-sponsored campaign that represents a significant evolution in critical infrastructure targeting: a tactical pivot where what appear to be misconfigured customer network edge devices became the primar...
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple and Gladinet CentreStack and Triofox flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA)Â added Apple and Gladinet CentreStack and Triofox flaws to its Known Expl...
While many in the legal community report positive use cases for the tech, AI-driven disinformation and deepfakes are causing havoc in courtrooms.Â
The post AI is causing all kinds of problems in the legal sector appeared first on CyberScoop.
The federal government contractor admits it made multiple mistakes in the hiring and firing of Muneeb and Sohaib Akhter.
The post Opexus claims background checks missed red flags on twins accused of insider breach appeared first on CyberScoop.
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision déclarant une infraction à l'encontre de la Mairie de Sotoserrano pour la divulgation du salaire net mensuel d'une employée lors d'un événement public.Cette affaire débute par une plainte déposée le 11 janvier 2024, signalant...
L'autorité danoise de protection des données (Datatilsynet) a publié une décision concernant la société DSB Service & Retail A/S et la vidéosurveillance de ses employés dans ses magasins 7-eleven.Cette affaire débute par une plainte déposée par un syndicat au nom d'un de ses membres, qui avait f...
Users accessing the SoundCloud audio streaming platform through a virtual private network (VPN) connection are denied access to the service and see a 403 'forbidden' error. [...]
Age verification mandates won't magically keep young people safer online, but that has not stopped governments around the world spending this year implementing or attempting to introduce legislation requiring all online users to verify their ages before accessing the digital space.Â
The UK’s misguid...