> TODAY'S SUMMARY (98 articles)
Today's cyber news highlights several critical threats and trends. Anthropic has taken its AI models offline after incidents involving breaches of U.S. government sites, signaling growing concerns over AI security. Ahold Delhaize and major French supermarket chains faced significant disruptions from cyberattacks targeting refrigeration systems, leading to food waste and operational downtime. In another notable incident, Ledger confirmed a hardware implant in its wallets, resulting in cryptocurrency theft. Additionally, a critical vulnerability in SonicWall appliances is being actively exploited, urging organizations to patch immediately. The trend of utilizing AI in cyber operations continues, with reports of CyberXero using AI agents to steal sensitive records from Ukraine. Overall, the landscape remains dynamic and fraught with escalating threats.
|
// AI-powered summary generated at 20:00
Threat actors stole personal data, including names, IDs, and financial details from Prosper, affecting over 17M users. Prosper is a U.S.-based peer-to-peer lending platform that connects individual borrowers with investors. Founded in 2005 and headquartered in San Francisco, Prosper allows people to...
Set for January 2026 at Automotive World in Tokyo, the contest will have six categories, including Tesla, infotainment systems, EV chargers, and automotive OSes.
The post Over $3 Million in Prizes Offered at Pwn2Own Automotive 2026 appeared first on SecurityWeek.
Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously.
Cyberkriminelle haben auf Daten der Stadtverwaltung Hohen Neuendorf zugegriffen.LookerStudio – shutterstock.com
Wie die Stadtverwaltung Hohen Neuendorf auf ihrer Website mitteilt, gab es kürzlich einen Cyberangriff. Nachdem der Vorfall am 7. Oktober entdeckt wurde, mussten s...
Attackers are embedding blocks of links that lead to porn sites, online casinos, and the like. We explain their objective, and how to protect your website.
Sotheby's has disclosed a data breach impacting personal information, including SSNs.
The post Hackers Steal Sensitive Data From Auction House Sotheby’s appeared first on SecurityWeek.
Here’s the summary:
We pointed a commercial-off-the-shelf satellite dish at the sky and carried out the most comprehensive public study to date of geostationary satellite communication. A shockingly large amount of sensitive traffic is being broadcast unencrypted, including critical infrastructure,...
The danger isn’t that AI agents have bad days — it’s that they never do. They execute faithfully, even when what they’re executing is a mistake. A single misstep in logic or access can turn flawless automation into a flawless catastrophe.
This isn't some dystopian fantasy—it's Tuesday at the office...
CVE-2025-55315 is an HTTP request smuggling bug leading to information leaks, file content tampering, and server crashes.
The post ‘Highest Ever’ Severity Score Assigned by Microsoft to ASP.NET Core Vulnerability appeared first on SecurityWeek.
The US lending platform said early investigations found no evidence of unauthorized account access or fund theft
Hacker haben Kundendaten des Modekonzerns Mango gestohlen. Auch deutsche Kunden sind betroffen. Vytautas Kielaitis – shutterstock.com
Kriminelle Hacker haben massenhaft persönliche Daten von Kunden des spanischen Modekonzerns Mango erbeutet. Ein externer Marketingdienstleist...
While Prosper says no funds or accounts were accessed, the stolen data could lead to targeted phishing and identity theft.
Despite recognizing the severity of the threat, enterprises continue to respond slowly to warnings that existing systems must be updated to address the risks of the approaching advent of quantum computers.
Quantum computers threaten the security of existing public-key crypt...
By revoking 200 software-signing certificates, Microsoft has hampered the activities of Vanilla Tempest, a ransomware-wielding threat actor that has been targeting organizations with malware posing as Microsoft Teams. “In this campaign, Vanilla Tempest used fake MSTeamsSetup.exe files hosted on mali...
Microsoft revoked 200+ certificates used by Vanilla Tempest to sign fake Teams installers spreading Oyster backdoor and Rhysida ransomware. Microsoft revoked over 200 certificates used by the cybercrime group Vanilla Tempest (aka VICE SPIDER and Vice Society) to sign fake Teams installers spreading...
Cybersecurity researchers have disclosed details of a recently patched critical security flaw in WatchGuard Fireware that could allow unauthenticated attackers to execute arbitrary code.
The vulnerability, tracked as CVE-2025-9242 (CVSS score: 9.3), is described as an out-of-bounds write vulnerabili...
Matthew D. Lane, a Massachusetts student, got four years in prison for hacking and extorting $3M from PowerSchool and another company. A Massachusetts student, Matthew D. Lane, was sentenced to four years in prison for hacking and extorting about $3 million from two companies, including PowerSchool....
Hackers stole names, addresses, dates of birth, email addresses, Social Security numbers, government IDs, and other information.
The post Prosper Data Breach Impacts 17.6 Million Accounts appeared first on SecurityWeek.
An attacker can exploit the flaws to put devices into a permanent DoS condition that prevents remote restoration.
The post Vulnerabilities Allow Disruption of Phoenix Contact UPS Devices appeared first on SecurityWeek.
At ISACA Europe 2025, cybersecurity consultant Tony Gee shared some technical measures security teams could implement to fight against the infostealer scourge