> TODAY'S SUMMARY (179 articles)
Today's cybersecurity landscape reveals several significant threats and trends. United Airlines has restricted the use of AI agents for flight bookings due to concerns over credential sharing and potential unauthorized purchases. Maersk confirmed a data breach attributed to the WhiteArmor ransomware group, which is demanding a $5 million ransom after exploiting a legacy system. A critical zero-day vulnerability in Microsoft's Windows SignDrop allows local users to gain SYSTEM privileges, raising alarms for affected systems. Additionally, cybersecurity researchers uncovered a credential theft campaign that targeted over 60,000 GitHub repositories, utilizing hijacked accounts to deploy malware. Finally, new vulnerabilities in various software, including Apache and MongoDB, highlight the ongoing need for vigilant patch management and security practices.
|
// AI-powered summary generated at 20:00
Cloudflare recently mitigated a new record-breaking Aisuru attack that peaked at 14.1 Bpps.
The post Aisuru Botnet Powers Record DDoS Attack Peaking at 29 Tbps appeared first on SecurityWeek.
Marquis Data Breach Impacts Over 780,000 People Hackers accessed the network of fintech provider Marquis and stole files containing personal and financial data on more than 780,000 individuals, including names, addresses, Social Security numbers, taxpayer IDs, and bank or card details. The intrusion...
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Media drivers;
- Network drivers;
- Netfilter;
- TLS protocol;
(CVE-2025-21729, CVE-2025-38227, CVE-2025-38616...
Several security issues were fixed in the Linux kernel.
The BBB warns of a rising ghost-tap scam exploiting tap-to-pay cards and mobile wallets. How attackers use NFC proximity tricks.
The post Ghost-Tap Scam Makes Payments Scarier appeared first on Security Boulevard.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- x86 architecture;
- Cryptographic API;
- Android drivers;
- TTY drivers;
- F2FS file system;
- 9P file sys...
Proxmox Datacenter Manager 1.0 : la première version stable est enfin disponible ! Votre cockpit unique pour gérer les hôtes Proxmox VE sur plusieurs sites !
Le post Proxmox Datacenter Manager 1.0 : la solution pour centraliser la gestion des infrastructures Proxmox a été publié sur IT-Connect.
CrowdStrike deepens its AWS partnership with automated Falcon SIEM configuration, AI security capabilities, EventBridge integrations and new MSSP-focused advancements.
The post CrowdStrike Extends Scope of AWS Cybersecurity Alliance appeared first on Security Boulevard.
Helmet Security has built an end-to-end platform that secures the infrastructure for agentic AI communication.
The post Helmet Security Emerges From Stealth Mode With $9 Million in Funding appeared first on SecurityWeek.
You can improve the odds by combining skepticism, verification habits, and a few technical checks Opinion Liars, cranks, and con artists have always been with us. It's just that nowadays their reach has gone from the local pub to the globe.…
Data leaks have shed a new light on Intellexa’s flagship spyware infrastructure and attack vectors
Cloudflare is down, as websites are crashing with a 500 Internal Server Error. Cloudflare is investigating the reports. [...]
Microsoft a annoncé de nouvelles fonctionnalités pour ses plans Microsoft 365 Business et Enterprise, accompagnées d'une augmentation des tarifs en 2026.
Le post Évolution des fonctionnalités et des tarifs Microsoft 365 en 2026 : ce que vous devez savoir ! a été publié sur IT-Connect.
Check Point announced its new Check Point Quantum Firewall Software, R82.10, introducing 20 new capabilities designed to help enterprises safely adopt AI, protect distributed environments, and simplify zero trust across hybrid networks. “As organizations embrace AI, security teams are under growing...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday released details of a backdoor named BRICKSTORM that has been put to use by state-sponsored threat actors from the People's Republic of China (PRC) to maintain long-term persistence on compromised systems.
"BRICKSTORM is a...
Cyberkriminelle sollen deutschlandweit mindestens 120 Menschen um einen Gesamtbetrag von mehr als 1,3 Millionen Euro gebracht haben.MiniStocker – shutterstock.com
Die Werbung mit Promis für ein “geheimes Finanzprodukt” war gefälscht, Anleger verloren ihr Geld: Mutmaßliche In...
A new anonymous phone service allows you to sign up with just a zip code.
AWS has seen multiple China-linked threat groups attempting to exploit the React vulnerability CVE-2025-55182.
The post Chinese Hackers Exploiting React2Shell Vulnerability appeared first on SecurityWeek.
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteTwelve years (and one day) since launching Have I Been Pwned, it's now a service that Charlotte and I live and breathe every day. From the first thing e...
AutoIT3[1] is a powerful language that helps to built nice applications for Windows environments, mainly to automate tasks. If it looks pretty old, the latest version was released last September and it remains popular amongst developers, for the good… or the bad! Malware written in AutoIt3 has exi...