> TODAY'S SUMMARY (179 articles)
Today's cybersecurity landscape reveals several significant threats and trends. United Airlines has restricted the use of AI agents for flight bookings due to concerns over credential sharing and potential unauthorized purchases. Maersk confirmed a data breach attributed to the WhiteArmor ransomware group, which is demanding a $5 million ransom after exploiting a legacy system. A critical zero-day vulnerability in Microsoft's Windows SignDrop allows local users to gain SYSTEM privileges, raising alarms for affected systems. Additionally, cybersecurity researchers uncovered a credential theft campaign that targeted over 60,000 GitHub repositories, utilizing hijacked accounts to deploy malware. Finally, new vulnerabilities in various software, including Apache and MongoDB, highlight the ongoing need for vigilant patch management and security practices.
|
// AI-powered summary generated at 20:00
Analysts worry lazy users could have agents complete mandatory infosec training, and attackers could do far nastier things Agentic browsers are too risky for most organizations to use, according to analyst firm Gartner.…
PLUS: South Korea to strengthen security standards; Canon closes Chinese printer plant; APAC datacenter capacity to triple by 2029; And more Asia In Brief Chinese rocketry outfit LandSpace last week flew what it hoped would be the country’s first reusable rocket, only to watch it explode while atte...
PLUS: New kind of DDOS from the Americas; Predator still hunting spyware targets; NIST issues IoT advice; And more! Infosec in Brief The Apache Foundation last week warned of a 10.0-rated flaw in its Tika toolkit.…
De multiples vulnérabilités ont été découvertes dans MISP. Elles permettent à un attaquant de provoquer une injection de code indirecte à distance (XSS).
De multiples vulnérabilités ont été découvertes dans Traefik. Elles permettent à un attaquant de provoquer une élévation de privilèges, une atteinte à la confidentialité des données et un contournement de la politique de sécurité. Le CERT-FR a connaissance d'une preuve de concept publique pour la...
Pluck 4.7.7-dev2 - PHP Code Execution
De multiples vulnérabilités ont été découvertes dans les produits Microsoft. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.
L'Ehpad de la Résidence du parc à Champdeniers-Saint-Denis a été victime d'une cyberattaque par rançongiciel, entraînant le chiffrement de certains fichiers et une potentielle exfiltration de données personnelles. La direction a activé son plan de gestion de crise pour protéger les résidents et leur...
Posillico, Inc. experienced a network disruption on December 8, 2025, and discovered that certain files were potentially accessed or acquired without authorization. The investigation found that personal information belonging to certain Maine residents was contained within the affected files. A cyber...
ChatGPT is allegedly showing ads to those who pay $20 for the Plus subscription, but OpenAI says this is an app recommendation feature, not an ad. [...]
Chatham Asset Management, LLC detected a compromise to its network environment, potentially impacting personal information. The breach occurred on December 8, 2025, and the organization has taken measures to secure and remediate the issue. A cyberattack was claimed by Worldleaks on December 23.
Les Cheyenne et Arapaho Tribes of Oklahoma ont subi une attaque de ransomware qui a forcé la fermeture des réseaux informatiques tribaux, perturbant les services de messagerie électronique et téléphonique. Les opérations ont été temporairement suspendues pendant que les systèmes étaient restaurés et...
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Analysis of ShadowPad Attack Exploiting WSUS Remote Code Execution Vulnerability (CVE-2025-59287)Â Â Shai-Hulud 2.0 Supply Chain Attack: 25K+ npm Re...
The North Carolina podiatry practice, Carolina Foot & Ankle Associates, is notifying patients that some of their personal and protected health information was exposed in a December 2025 cybersecurity incident. The incident was detected on December 8, 2025, when it experienced a network disruption.
Windward Life Care suffered a data breach where an unauthorized individual viewed or copied sensitive information. The breach occurred on or about December 8, 2025. A cyberattack was claimed by Sinobi on January 5, 2026.
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including the international press. Attackers launch dual campaign on GlobalProtect p...
Unauthorized access to certain systems within the network occurred on December 3, 2025, resulting in the exposure of personal information of two Maine residents. The incident was discovered on December 8, 2025, and an investigation was launched. A cyberattack was claimed by Rhysida on February 12, 2...
Several vulnerabilities have been discovered in the FFmpeg multimedia framework, which could result in denial of service or potentially the execution of arbitrary code if malformed files/streams are processed. For the stable distribution (trixie), this problem has been fixed in version 7:7.1.3-0+deb...
Portugal has modified its cybercrime law to establish a legal safe harbor for good-faith security research and to make hacking non-punishable under certain strict conditions. [...]