> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
Explore risk-based authentication (RBA) in detail. Learn how it enhances security and user experience in software development, with practical examples and implementation tips.
The post What is Risk-Based Authentication? appeared first on Security Boulevard.
The NCA on Friday confirmed that a money laundering network under investigation was used to purchase Keremet Bank in Kyrgyzstan, which was sanctioned earlier this year.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de SUSE. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilÚges et une atteinte à la confidentialité des données.
De multiples vulnérabilités ont été découvertes dans le noyau Linux d'Ubuntu. Elles permettent à un attaquant de provoquer une atteinte à la confidentialité des données, un contournement de la politique de sécurité et un déni de service.
Le département de police de Milwaukee a subi un incident cybernétique qui a touché l'unité High Intensity Drug Trafficking Areas, une source a indiqué à la presse locale, marquant le dernier d'une décennie de problÚmes de cybersécurité pour l'agence. L'incident a affecté les systÚmes de l'unité, mai...
De multiples vulnérabilités ont été découvertes dans les produits IBM. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une atteinte à la confidentialité des données et une atteinte à l'intégrité des données.
Une vulnérabilité a été découverte dans Microsoft Visual Studio Code. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
Enan Tech Private Limited a subi une attaque de ransomware le 21 novembre, entraßnant une perte de données. La police des cybercrimes a enregistré une plainte le 26 novembre. L'attaque a été signalée par Abhishek Anigol, responsable de la protection des données de l'entreprise.
De multiples vulnérabilités ont été découvertes dans le noyau Linux de Red Hat. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire, un déni de service à distance et une atteinte à la confidentialité des données.
Le conseil de santĂ© MACT affirme son engagement Ă protĂ©ger la confidentialitĂ© des informations et informe quâun incident informatique a entraĂźnĂ© un accĂšs non autorisĂ© Ă certains fichiers entre le 12 et le 20 novembre 2025. DĂšs la dĂ©couverte de lâincident, MACT a sĂ©curisĂ© ses systĂšmes, menĂ© une enquĂȘ...
DHJJ, Ltd. suffered a data security incident involving personal information, including names, addresses, dates of birth, and Social Security numbers. The incident occurred on November 21, 2025, and was discovered on February 13, 2026. Affected individuals were notified on March 19, 2026.
It's no secret that 2025 has given Americans plenty to protest about. But as news cameras showed protesters filling streets of cities across the country, law enforcement officersâincluding U.S. Border Patrol agentsâwere quietly watching those same streets through different lenses: Flock Safety autom...
SitusAMC Holdings Corporation suffered a data breach where an unauthorized third party accessed certain systems within its information technology network, potentially exposing personal information of borrowers and non-borrowers. The breach occurred between November 13-21, 2025. SitusAMC is offering...
Company 'clearly delighted' with the outcome The US Securities and Exchange Commission (SEC) has abandoned the lawsuit it pursued against SolarWinds and its chief infosec officer for misleading investors about security practices that led to the 2020 SUNBURST attack.âŠ
The Securities and Exchange Commission on Thursday dropped its case against SolarWinds and its chief information security officer over its handling of an alleged Russian cyberespionage campaign uncovered in 2020, an incident that penetrated at least nine federal agencies and hundreds of companies. T...
The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift.
The post Hundreds of Salesforce customers hit by yet another third-party vendor breach appeared first on CyberScoop.
Salesforce posted a message on its website saying an investigation revealed that the activity âmay have enabled unauthorized access to certain customersâ Salesforce data through the appâs connection.â
The spyware vendor made those two arguments, among others, in a motion to stay the California court ruling.
The post NSO Group argues WhatsApp injunction threatens existence, future U.S. government work appeared first on CyberScoop.
Key Takeaways What is Unified AI Oversight? In todayâs AI landscape, organizations face overlapping regulations, ethical expectations, and AI operational risks. Unified AI oversight is a single lens to manage AI systems while staying aligned with global rules, reducing blind spots and duplication. I...
Researchers disclosed a WhatsApp flaw that exposed 3.5B accounts. Meta has patched it to prevent this mass enumeration. A team of researchers at the University of Vienna found a WhatsApp flaw that could scrape 3.5 billion accounts. Meta has since patched the vulnerability to block this enumeration t...