> TODAY'S SUMMARY (135 articles)
Today's cybersecurity news highlights several critical threats and trends. Weak SQL Server passwords have been exploited to deploy cryptominers and Gh0st RAT, emphasizing the need for stronger credential management. A critical remote code execution vulnerability (CVE-2026-119618) in Apache's HTTP/2 module has been patched, affecting numerous servers. The WhiteArmor gang has claimed responsibility for a data breach at shipping giant Maersk, demanding a $5 million ransom for the stolen data. Additionally, law enforcement has dismantled the infrastructure behind Gootloader, CastleRAT, and StealC malware operations, recovering over 6 million stolen credentials. As cyber threats evolve, organizations must adopt proactive security measures and stay updated on vulnerabilities within their systems.
|
// AI-powered summary generated at 16:00
Wiz says React2Shell attacks accelerating, ranging from cryptominers to state-linked crews Half of the internet-facing systems vulnerable to a fast-moving React remote code execution flaw remain unpatched, even as exploitation has exploded into more than a dozen active attack clusters ranging from b...
Free unofficial patches are available for a new Windows zero-day vulnerability that allows attackers to crash the Remote Access Connection Manager (RasMan) service. [...]
NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows Systems Researchers have disclosed a newly identified Windows backdoor called NANOREMOTE that abuses the Google Drive API for command‑and‑control functions. The malware can execute commands, transfer files, and steal data covertl...
Elastic found a new Windows backdoor, NANOREMOTE, similar to FINALDRAFT/REF7707, using the Google Drive API for C2. Elastic Security Labs researchers uncovered NANOREMOTE, a new Windows backdoor that uses the Google Drive API for C2. Elastic says it shares code with the FINALDRAFT (Squidoor) implant...
All critical vulnerabilities in Microsoft, third-party, and open source code are eligible for rewards if they impact Microsoft services.
The post Microsoft Bug Bounty Program Expanded to Third-Party Code appeared first on SecurityWeek.
Les mises à jour de décembre 2025 sont là : KB5072033 pour Windows Server 2025 et KB5071547 pour Windows Server 2022. Voici un récapitulatif des changements.
Le post Le point sur les mises à jour de décembre 2025 pour Windows Server a été publié sur IT-Connect.
Notepad++ found a vulnerability in the way the software updater authenticates update files.Â
The post Notepad++ Patches Updater Flaw After Reports of Traffic Hijacking appeared first on SecurityWeek.
The National Cyber Security Centre has released new learnings from a cyber deception pilot
After years of trying VPNs for myself, privacy-minded family members, and a few mission-critical projects, here’s what I wish everyone knew.
Discord consomme trop de RAM sur Windows, mais des optimisations sont en cours, comme le redémarrage automatique si l'application consomme plus de 4 Go de RAM.
Le post Windows 11 : Discord travaille sur des améliorations pour consommer moins de RAM a été publié sur IT-Connect.
The browser has become the main interface to GenAI for most enterprises: from web-based LLMs and copilots, to GenAI‑powered extensions and agentic browsers like ChatGPT Atlas. Employees are leveraging the power of GenAI to draft emails, summarize documents, work on code, and analyze data, often by c...
Cyberkriminelle haben Daten bei der Gemeindeverwaltung Untereisesheim gestohlen und im Darknet veröffentlicht. BeeBright – shutterstock.com
Mitte Oktober funktionierte im Rathaus Untereisesheim fast nichts mehr. Die Gemeindeverwaltung war Ziel eines Cyberangriffs, bei dem I...
Introduction Between July 2024 and February 2025, 6 suspicious image files were uploaded to VirusTotal. Thanks to a lead from Meta, these samples came to the attention of Google Threat Intelligence Group. Investigation of these images showed that these images were DNG files targeting the Quram libra...
CISA has ordered U.S. federal agencies to patch a critical GeoServer vulnerability now actively exploited in XML External Entity (XXE) injection attacks. [...]
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an OSGeo GeoServer flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an OSGeo GeoServer flaw, tracked as CVE-2025-58360 (CVSS Score of 8.2), to its Known Exploi...
Why Code Signing Isn’t Optional? If you’ve ever tried running an unsigned app on macOS, you already know how brutal the experience is. You double-click your .app file, and that dreaded message appears: “This app can’t be opened because it’s from an unidentified developer.” And that’s it. Your user i...
The UK’s data protection regulator has fined password manager provider LastPass £1.2m after 2022 data breach
The React team has released fixes for two new types of flaws in React Server Components (RSC) that, if successfully exploited, could result in denial-of-service (DoS) or source code exposure.
The team said the issues were found by the security community while attempting to exploit the patches releas...
Swissbit is expanding its portfolio of multi-application security keys with the launch of the iShield Key 2, introducing a new variant featuring HID Seos, one of the most widely used credential technologies for physical access control. Following the addition of MIFARE DESFire EV3, Swissbit now suppo...
Cet article décrypte les points clés du guide ANSSI sur la définition d'une politique de filtrage réseau d'un pare-feu, pour vous aider à appréhender le sujet.
Le post Sécu en bref : définir une politique de filtrage réseau sur un pare-feu selon l’ANSSI a été publié sur IT-Connect.