> TODAY'S SUMMARY (179 articles)
Today's cybersecurity landscape reveals several significant threats and trends. United Airlines has restricted the use of AI agents for flight bookings due to concerns over credential sharing and potential unauthorized purchases. Maersk confirmed a data breach attributed to the WhiteArmor ransomware group, which is demanding a $5 million ransom after exploiting a legacy system. A critical zero-day vulnerability in Microsoft's Windows SignDrop allows local users to gain SYSTEM privileges, raising alarms for affected systems. Additionally, cybersecurity researchers uncovered a credential theft campaign that targeted over 60,000 GitHub repositories, utilizing hijacked accounts to deploy malware. Finally, new vulnerabilities in various software, including Apache and MongoDB, highlight the ongoing need for vigilant patch management and security practices.
|
// AI-powered summary generated at 20:00
Piratage de 120 000 caméras sud-coréennes et enquête sur les risques pour la vie privée et la cybersécurité domestique....
Plus de 200 faux sites de transports publics mis en place par des pirates informatiques. Ils vous promettent des cartes de bus pour 2 €....
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday formally added a critical security flaw impacting React Server Components (RSC) to its Known Exploited Vulnerabilities (KEV) catalog following reports of active exploitation in the wild.
The vulnerability, CVE-2025-55182 (CVS...
Enquête ZATAZ sur la prolifération de faux sites administratifs et leurs risques d’usurpation d’identité, avec un décryptage cyber précis et des conseils de protection....
Plus: The Trump administration declines to issue sanctions over Salt Typhoon’s hacking spree, officials warn of a disturbingly stealthy Chinese malware specimen, and more.
Analyse d’une opération d’espionnage automatisée utilisant une IA agentique....
Wanna know a secret? Whether you're logging into your bank, health insurance, or even your email, most services today do not live by passwords alone. Now commonplace, multifactor authentication (MFA) requires users to enter a second or third proof of identity. However, not all forms of MFA are creat...
In March 2021, the Russian online streaming service KinoKong suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed over 800k unique email addresses along with names, usernames, IP addresses and MD5 password hashes.
Information published.
Information published.
A maximum severity vulnerability in Apache Tika, tracked as CVE-2025-66516 (CVSS score of 10.0), allows XML external entity attacks. CVE-2025-66516 carries a maximum CVSS rating of 10.0 because it lets attackers trigger an XXE injection in Apache Tika’s core, PDF, and parser modules. An attacker can...
Information published.
Information published.
Yem Chio a été victime d'une attaque de ransomware le 6 décembre 2025, mais aucune impact sur ses opérations n'a été constaté, les systèmes d'information sont en cours de restauration. La société renforce ses mécanismes de protection et continuera à surveiller de près son réseau et son infrastructur...
Information published.
Information published.
Le district scolaire Eanes Independent School District a subi une panne de Wi-Fi pendant une semaine, qui a été restaurée le 12 décembre. L'enseigne Qilin a revendiqué une attaque contre ce district scolaire le 22 décembre.
Information published.
Information published.
Wound Technology Network, Inc. suffered a data breach where an unauthorized individual copied certain information between December 6, 2025, and December 9, 2025. The potentially impacted information varied by individual and included what was viewed or copied without authorization. Woundtech is provi...