> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends. Weak SQL Server passwords have been exploited to deploy cryptominers and Gh0st RAT, emphasizing the need for stronger credential management. A critical remote code execution vulnerability (CVE-2026-119618) in Apache's HTTP/2 module has been patched, affecting numerous servers. The WhiteArmor gang has claimed responsibility for a data breach at shipping giant Maersk, demanding a $5 million ransom for the stolen data. Additionally, law enforcement has dismantled the infrastructure behind Gootloader, CastleRAT, and StealC malware operations, recovering over 6 million stolen credentials. As cyber threats evolve, organizations must adopt proactive security measures and stay updated on vulnerabilities within their systems.
|
// AI-powered summary generated at 16:00
This week on the Lock and Code podcast, we speak with Erin West about pig butchering scams and the efforts to stop this new, global crisis.
Every year, just as we start to put up the Christmas Tree, we have another tradition at Report URI which is to conduct our annual penetration test! 🎅🎄🎁 --> 🩻🔐🥷This will be our 6th annual penetration test that we've posted completely publicly,
libsoup could be made to crash if it received specially crafted network traffic.
The internet stayed busy, brittle, and under constant pressure in 2025. Cloudflare’s annual Radar Year in Review offers a wide view of how traffic moved, where attacks clustered, and what failed when systems were stressed. Cloudflare, which operates a large global network and publishes aggregated in...
At one global manufacturing client, an AI model flagged a potential breach pattern that turned out to be normal behavior from a test server. The system wasn’t wrong — but the humans stopped questioning it. It took a single analyst with strong data storytelling skills to realiz...
It was discovered libsoup incorrectly handled memory when handling specific
HTTP/2 read and cancel sequences. An attacker could possibly use this issue
to cause a denial of service.
Phishing attacks in 2025 increasingly moved beyond email, with attackers using social platforms, search ads, and browser-based techniques to bypass MFA and steal sessions. Push Security outlines key phishing trends and what security teams must know as identity-based attacks continue to evolve in 202...
Atlassian released security updates to address dozens of flaws, including multiple critical-severity vulnerabilities. Atlassian addressed dozens of vulnerabilities impacting its products, including multiple critical-severity issues. One of the most severe bugs is a maximum-severity XML External Enti...
Astra Security announced the launch of its Cloud Vulnerability Scanner, a new solution designed to help organizations continuously maintain validated cloud security. Cloud infrastructures change constantly as teams create new IAM roles, adjust network rules, and deploy new workloads. Quarterly scans...
Microsoft says that recent Windows 11 security updates are causing VPN networking failures for enterprise users running Windows Subsystem for Linux. [...]
Multiple security vulnerabilities have been disclosed in the open-source private branch exchange (PBX) platform FreePBX, including a critical flaw that could result in an authentication bypass under certain configurations.
The shortcomings, discovered by Horizon3.ai and reported to the project maint...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Media drivers;
- Memory management;
- Appletalk network protocol;
- Netfilter;
(CVE-202...
Die Ransomware-Bande Akira hat die Versicherungsgruppe Ideal angegriffen.Who is Danny – shutterstock.com
Auf seiner Webseite informiert das Versicherungsunternehmen Ideal aktuell über einen Cyberangriff. Die Systeme seien vorsorglich vom Netz genommen worden und der Geschäft...
Fintech company Prosper Marketplace and car dealership services provider 700Credit are the latest financial institutions to report data breaches affecting millions of Americans.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Media drivers;
- Memory management;
- Appletalk network protocol;
- Netfilter;
(CVE-202...
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
Your employees are using AI whether you’ve sanctioned it or not. And even if you’ve carefully vetted and approved an enterprise-grade AI platform, you’re still at risk of attacks and data leakage.
Key takeaways:
Security teams face three key risks as AI usage becomes widespread at work: Shadow AI,...
usbmuxd could be made to overwrite files.
Google has also mentioned seeing React2Shell attacks conducted by Iranian threat actors.
The post Google Sees 5 Chinese Groups Exploiting React2Shell for Malware Delivery appeared first on SecurityWeek.