> TODAY'S SUMMARY (179 articles)
Today's cybersecurity landscape reveals several significant threats and trends. United Airlines has restricted the use of AI agents for flight bookings due to concerns over credential sharing and potential unauthorized purchases. Maersk confirmed a data breach attributed to the WhiteArmor ransomware group, which is demanding a $5 million ransom after exploiting a legacy system. A critical zero-day vulnerability in Microsoft's Windows SignDrop allows local users to gain SYSTEM privileges, raising alarms for affected systems. Additionally, cybersecurity researchers uncovered a credential theft campaign that targeted over 60,000 GitHub repositories, utilizing hijacked accounts to deploy malware. Finally, new vulnerabilities in various software, including Apache and MongoDB, highlight the ongoing need for vigilant patch management and security practices.
|
// AI-powered summary generated at 20:00
Information published.
Information published.
A maximum severity vulnerability in Apache Tika, tracked as CVE-2025-66516 (CVSS score of 10.0), allows XML external entity attacks. CVE-2025-66516 carries a maximum CVSS rating of 10.0 because it lets attackers trigger an XXE injection in Apache Tika’s core, PDF, and parser modules. An attacker can...
Information published.
Information published.
Yem Chio a été victime d'une attaque de ransomware le 6 décembre 2025, mais aucune impact sur ses opérations n'a été constaté, les systèmes d'information sont en cours de restauration. La société renforce ses mécanismes de protection et continuera à surveiller de près son réseau et son infrastructur...
Information published.
Information published.
Le district scolaire Eanes Independent School District a subi une panne de Wi-Fi pendant une semaine, qui a été restaurée le 12 décembre. L'enseigne Qilin a revendiqué une attaque contre ce district scolaire le 22 décembre.
Information published.
Information published.
Wound Technology Network, Inc. suffered a data breach where an unauthorized individual copied certain information between December 6, 2025, and December 9, 2025. The potentially impacted information varied by individual and included what was viewed or copied without authorization. Woundtech is provi...
Information published.
Information published.
As the React2Shell flaw threatens React & Next.js apps, learn how SentinelOne detects, validates, and protects vulnerable workloads.
Information published.
Information published.
Proof of life? Or an active social media presence? Criminals are altering social media and other publicly available images of people to use as fake proof of life photos in "virtual kidnapping" and extortion scams, the FBI warned on Friday. …
Information published.
Information published.