> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
The China-linked advanced persistent threat (APT) group known as APT31 has been attributed to cyber attacks targeting the Russian information technology (IT) sector between 2024 and 2025 while staying undetected for extended periods of time.
"In the period from 2024 to 2025, the Russian IT sector, e...
Cox Enterprises is notifying impacted individuals of a data breach that exposed their personal data to hackers who breached the company network after exploiting a zero-day flaw in Oracle E-Business Suite. [...]
Huntress analysts reconstructed a Qilin ransomware attack from a single endpoint, using limited logs to reveal rogue ScreenConnect access, failed infostealer attempts, and the ransomware execution path. The investigation shows how validating multiple data sources can uncover activity even when visib...
Do you think cyberattacks are headlines anymore? Given the frequent occurrences, it has turned headlines into a day-to-day reality, and thatâs scarier! Organizations that are big names to small organizations that are still growing, every one of them is being hit one way or the other. From supply cha...
Plus: The SEC lets SolarWinds off the hook, Microsoft stops a historic DDoS attack, and FBI documents reveal the agency spied on an immigration activist Signal group in New York City.
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds an Oracle Fusion Middleware flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a an Oracle Fusion Middleware flaw, tracked as CVE-2025-61757  (CVSS score of 9.8)...
CyLab-Africa researchers partner with mobile security provider for summer collaboration experience
Researchers from CyLab-Africa and the Upanzi Network recently partnered with the mobile security provider Approov to explore the security of common financial services apps used across Africa. Aft...
DĂ©couvrez Mon top 8 des scripts NSE essentiels pour renforcer la sĂ©curitĂ© de votre systĂšme dâinformation et exploiter pleinement la puissance de Nmap.
The post Nmap : 8 scripts NSE incontournables pour sécuriser votre SI first appeared on IT-Connect.
Bad actors are leveraging browser notifications as a vector for phishing attacks to distribute malicious links by means of a new command-and-control (C2) platform called Matrix Push C2.
"This browser-native, fileless framework leverages push notifications, fake alerts, and link redirects to target v...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added a critical security flaw impacting Oracle Identity Manager to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation.
The vulnerability in question is CVE-2025-61757 (CVSS score: 9.8),...
It was a tense moment in Episode 4 of Pluribus, the Apple TV series about a world linked by a single intelligence.
Related: Mistaking pattern mastery for wisdom
A character named Carol Sturka, surrounded by a seemingly benevolent collective ⊠(moreâŠ)
The post MY TAKE: Carol Sturka declares âI have...
Cybersecurity company CrowdStrike fired a âsuspicious insiderâ last month, according to a report from TechCrunch.
The terminated worker allegedly provided information about the companyâs internal systems to a prominent hacking group. The firing came to light after Scattered...
The US federal government is rolling back mandates intended to protect critical infrastructure following the widespread Salt Typhoon attacks.
The Federal Communication Commission (FCC) has reversed a January 2025 Declaratory Ruling requiring US telecom providers to adopt an...
Jeffrey W. Krol and Associates, LTD. suffered a cyber security incident resulting in unauthorized access to client files. The breach involved personal information such as name, address, email address, date of birth, phone numbers, social security numbers, and/or banking information. A cyberattack wa...
Interstate Management Company, LLC confirmed that personal information may have been accessed or taken from certain hotel systems between November 19, 2025, and November 22, 2025. The information that could have been subject to unauthorized access includes name, Social Security number, and financial...
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) is warning government agencies to patch an Oracle Identity Manager tracked as CVE-2025-61757 that has been exploited in attacks, potentially as a zero-day. [...]
I did not know Adidas sold a sneaker called âSquid.â
As usual, you can also use this squid post to talk about the security stories in the news that I havenât covered.
Blog moderation policy.
How Can Organizations Ensure the Security of Non-Human Identities in the Cloud? How do organizations manage the security of machine identities and secrets? This question is at the forefront for companies across industries such as financial services, healthcare, and even travel, where the secure mana...
What Are Non-Human Identities in Cybersecurity, and How Can They Be Managed? How can organizations ensure robust security for their machine identities, commonly known as Non-Human Identities (NHIs)? These identities are critical in protecting sensitive data and maintaining a secure environment for A...
CrowdStrike says an insider shared internal screenshots with hackers but confirms no system breach and no customer data exposure. BleepingComputer first reported that CrowdStrike said an insider shared internal system screenshots with hackers, after Scattered Lapsus$ Hunters leaked them on Telegram....