> TODAY'S SUMMARY (110 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Cybercriminals are increasingly targeting everyday users with spyware, indicating a shift towards more indiscriminate attacks. Additionally, vulnerabilities in widely used platforms like SAP and Google Chrome have been actively exploited, with SAP releasing critical patches for multiple flaws. The Russian state-linked Turla group continues to pose a threat, using advanced tools like "Cereal" to intercept emails from government servers. Meanwhile, supply chain attacks remain a concern, evidenced by the recent Qubole incident, which compromised numerous organizations' credentials. Overall, the rise in cloud vulnerabilities and the exploitation of AI in cyberattacks are emerging as critical areas for organizations to address.
|
// AI-powered summary generated at 16:00
Names, addresses, email addresses, and phone numbers were compromised in a five-month-long data breach.
The post Personal Information of 33.7 Million Stolen From Coupang appeared first on SecurityWeek.
The UK Information Commissioner’s Office has launched an investigation into the mobile gaming sector
Google’s latest Android security update fixes 107 flaws across multiple components, including two vulnerabilities actively exploited in the wild. Google’s new Android update patches 107 vulnerabilities, including two already exploited in the wild, across system, kernel, and major vendor components....
ESET researchers say an Iran aligned threat group is refining its playbook again, and the latest activity shows how much its tactics have shifted. MuddyWater is a long running cyberespionage group, and new findings points to a campaign that hits a range of organizations in Israel, with one confirmed...
MuddyWater targets critical infrastructure in Israel and Egypt, relying on custom malware, improved tactics, and a predictable playbook
New IO study claims 88% of US and UK firms are concerned about state-sponsored cyber-attacks
Google warns that two out of the 107 vulnerabilities patched in Android this month have been exploited in limited, targeted attacks.
The post Android’s December 2025 Updates Patch Two Zero-Days appeared first on SecurityWeek.
La campagne ShadyPanda a permis à des pirates de piéger plus de 4,3 millions d’utilisateurs en diffusant des extensions pour Google Chrome et Microsoft Edge.
Le post ShadyPanda : des millions d’utilisateurs piégés par des extensions Chrome et Edge « mutantes » a été publié sur IT-Connect.
srcset="https://b2b-contenthub.com/wp-content/uploads/2025/12/R61_6423__MKP.jpg?quality=50&strip=all 3543w, https://b2b-contenthub.com/wp-content/uploads/2025/12/R61_6423__MKP.jpg?resize=300%2C168&quality=50&strip=all 300w, https://b2b-contenthub.com/wp-content/upl...
Skyflow announced the launch of its Runtime AI Data Security platform for AWS AgentCore. While AI models are improving every few months and the industry is investing hundreds of billions of dollars on AI infrastructure, most organizations still struggle to move from demos and prototypes to productio...
Upwind announced the launch of its integrated AI security suite, expanding the company’s CNAPP to protect the growing enterprise AI attack surface. The suite introduces real-time AI security, AI posture management, AI agents, and runtime protection, allowing AI security to benefit from the same deep...
Technology can uplift democracy, or it can be an authoritarian weapon. EFF is making sure it stays on the side of freedom. We’re defending encryption, exposing abusive surveillance tech, fighting government overreach, and standing up for free expression. But we need your help to protect digital righ...
London councils cyber incident: Data breach warning as recovery expected to take weeks Three inner London councils, including Westminster and Kensington and Chelsea, are recovering from a significant cyber incident that has now been confirmed to involve a data breach. Authorities are warning residen...
Google on Monday released monthly security updates for the Android operating system, including two vulnerabilities that it said have been exploited in the wild.
The patch addresses a total of 107 security flaws spanning different components, including Framework, System, Kernel, as well as those from...
In this Help Net Security interview, Dennis Pickett, CISO at RTI International, talks about how research institutions can approach cybersecurity with limited resources and still build resilience. He discusses the tension between open research and the need to protect sensitive information, noting tha...
Adversaries are hijacking AI technology for their own purposes, generating deepfakes, creating clever phishing lures, and launching novel types of advanced attacks. They are also targeting AI systems with prompt injection attacks aimed at tricking models into revealing sensiti...
UserLock brings modern identity and access management (IAM) to Active Directory, adding granular multi-factor authentication (MFA), contextual access controls, single sign-on (SSO) and real-time session management. It helps AD-first teams secure logons and govern access to network and SaaS resources...
Calling vulnerability researchers, exploit developers and others in the offensive cyber industry to share their views.
Des pirates sont parvenus à voler les clés de signature du développeur de SmartTube, un client YouTube, provoquant la diffusion d'une mise à jour suspecte.
Le post SmartTube, le client YouTube open source, a été piraté : une mise à jour suspecte diffusée ! a été publié sur IT-Connect.
AI development keeps accelerating while the safeguards around it move on uneven ground, according to The International AI Safety Report. Security leaders are being asked to judge exposure without dependable benchmarks. Developers build layered defenses Across the AI ecosystem, developers are adoptin...