> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
APT24 has been relying on various techniques to drop the BadAudio downloader and then deploy additional payloads.
The post Chinese Cyberspies Deploy ‘BadAudio’ Malware via Supply Chain Attacks appeared first on SecurityWeek.
SquareX claims to have found a way to abuse a hidden Comet API to execute local commands, but Perplexity says the research is fake.
The post SquareX and Perplexity Quarrel Over Alleged Comet Browser Vulnerability appeared first on SecurityWeek.
At New Zealand's Kawaiican cybersecurity convention, organizers hacked together a way for attendees to track CO2 levels throughout the venue—even before they arrived.
Outdated government web forms are placing millions of citizens at risk as sensitive information is collected and transmitted through insecure, non-compliant systems.
The post Legacy web forms are the weakest link in government data security appeared first on CyberScoop.
Ever wonder how some IT teams keep corporate data safe without slowing down employees? Of course you have.
Mobile devices are essential for modern work—but with mobility comes risk. IT admins, like you, juggle protecting sensitive data while keeping teams productive. That’s why more enterprises are...
A China-nexus threat actor known as APT24 has been observed using a previously undocumented malware dubbed BADAUDIO to establish persistent remote access to compromised networks as part of a nearly three-year campaign.
"While earlier operations relied on broad strategic web compromises to compromise...
The company has operated in stealth mode for four months and has signed dozens of customers, including eight unicorns.
The post Runlayer Emerges From Stealth Mode With $11 Million in Funding appeared first on SecurityWeek.
Learn how manufacturers can boost visibility while protecting user data with secure SEO, passwordless authentication, and privacy-first digital strategies.
The post Protecting User Data While Boosting Visibility: Secure SEO Strategies for Manufacturers appeared first on Security Boulevard.
Salesforce believes there has been unauthorized access to its customers’ data through the Gainsight app’s connection to its platform
Salesforce warns that unusual activity in Gainsight-linked OAuth apps may have enabled unauthorized access to some customers’ Salesforce data. Salesforce warned of unusual activity involving Gainsight-linked OAuth apps, noting that threat actors may have used these integrations to gain unauthorized...
From time to time, it can be instructive to look at generic phishing messages that are delivered to one's inbox or that are caught by basic spam filters. Although one usually doesn't find much of interest, sometimes these little excursions into what should be a run-of-the-mill collection of basic, c...
Agentic Threat Hunting, Predictive Threat Intelligence, Disinformation Security & Cyber Deception and more
The post Scaling Cyber: meet the next cybersecurity global leaders appeared first on Security Boulevard.
The infamous ShinyHunters hackers have targeted customer-managed Gainsight-published applications to steal data from Salesforce instances.
The post Salesforce Instances Hacked via Gainsight Integrations appeared first on SecurityWeek.
A multi-layered security framework protecting large-model applications from adversarial threats, data leakage, API abuse, and content risks Partner Content At MWC Shanghai 2025, ZTE has officially launched its ZXCSec MAF product, a dedicated application-layer security protection device specifically...
La solution Arx One Backup est capable de sauvegarder et de restaurer les données de serveurs, de postes de travail et de NAS, dans des datacenters en France.
The post Arx One Backup : une solution de sauvegarde pro pour les serveurs, les NAS et les postes de travail first appeared on IT-Connect.
Even mature engineering teams often treat threat modeling as an optional exercise, relying instead on VAPT or other post-development assessments with the assumption that “we’ll fix issues later.” But this approach is risky and reactive. Threat modeling is fundamentally proactive: it compels teams to...
Onapsis introduced a series of new updates to its Onapsis Control product line, advancing security capabilities across SAP and cloud ERP application development environments. These enhancements include integration with SAP Continuous Integration and Delivery (CI/CD), expanded Git repository support...
The U.S. Securities and Exchange Commission (SEC) has abandoned its lawsuit against SolarWinds and its chief information security officer, alleging that the company had misled investors about the security practices that led to the 2020 supply chain attack.
In a joint motion filed November 20, 2025,...
Schatten-KI in Unternehmen birgt erhebliche Risiken.phloxii – shutterstock.com
Immer mehr Fachkräfte in den sogenannten MINT-Berufen setzen Künstliche Intelligenz (KI) am Arbeitsplatz ohne die Genehmigung des Arbeitgebers ein. MINT steht für Mathematik, Informatik, Naturwiss...
The constantly growing number of acronyms in cyber security makes it difficult to maintain an overview and compare individual technologies. One example is the three closely related technologies for threat detection: network detection and response (NDR), endpoint detection and...