> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
Nov 19, 2025 - Alan Fagan - 1. Â Validating User Input
One of the cornerstones of API security is to validate user input. Failing to do so accurately can lead to a security issues such as injection attacks and Cross-Site Scripting. When users send data to your API, no matter the type, it should be v...
-----------
SESSION
Session 3C: Mobile Security
-----------
-----------
Authors, Creators & Presenters: Yuqing Yang (The Ohio State University), Yue Zhang (Drexel University), Zhiqiang Lin (The Ohio State University)
-----------
PAPER
Understanding Miniapp Malware: Identification, Dissection, an...
Thirty investigators from 15 countries took part in the five-day crackdown earlier this month targeting 69 digital piracy sites, including 25 illegal streaming services whose information was referred to cryptocurrency platforms for disruption.
In a move that could redefine the web, Google is testing AI-powered, UI-based answers for its AI mode. [...]
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. Google is aware that an exploit for CVE-2025-13223 exists in the wild. For the oldstable distribution (bookworm), these problems have been fixed
A remote code execution vulnerability, tracked as CVE-2025-11001, in the 7-Zip software is under active exploitation. A new 7-Zip flaw tracked as CVE-2025-11001 (CVSS score of 7.0) is now being actively exploited in the wild, NHS England warns. Remote attackers can trigger the vulnerability to execu...
The U.S. Patent and Trademark Office (USPTO) has proposed new rules that would effectively end the public’s ability to challenge improperly granted patents at their source—the Patent Office itself. If these rules take effect, they will hand patent trolls exactly what they’ve been chasing for years:...
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de SENDING TRANSPORTE Y COMUNICACIÓN, S.A. (comprenant le prononcé d'une amende de 80 000 €) pour des manquements en lien avec ses obligations en tant que sous-traitant.Cette affaire débute...
Operation WrtHug hijacks tens of thousands of outdated ASUS routers worldwide, mainly in Taiwan, the U.S., and Russia, forming a large botnet. A new campaign called Operation WrtHug has compromised tens of thousands of outdated or end-of-life ASUS routers worldwide, mainly in Taiwan, the U.S., and R...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a lancé une consultation publique sur des projets de fiches et de référentiels destinés à guider les organismes du secteur du logement social dans leur mise en conformité.Cette initiative vise à actualiser le "pack logement social" de...
L'Autorité nationale de surveillance du traitement des données à caractère personnel (ANSPDCP) roumaine a publié une décision de sanction à l'encontre de Greencorp S.R.L., comprenant une amende de 15 258 lei (3 000 €) pour des manquements en lien avec la sécurité du traitement.Cette affaire débute p...
And companies are getting caught in the crossfire interview Warfare has become a joint cyber-kinetic endeavor, with nations using cyber operations to scope out targets before launching missiles. And private companies, including shipping, transportation, and electronics manufacturers, are getting ca...
L'Autorité suédoise de protection de la vie privée (IMY) a commenté la proposition de la Commission européenne visant à modifier le RGPD.Le 19 novembre 2025, la Commission européenne a présenté des propositions de modification du RGPD dans le cadre d'un paquet législatif plus large, l'omnibus numéri...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision de sanction à l'encontre de la société APARELLS ORTOPEDICS CURTO, S.L., comprenant le prononcé d'une amende de 10 000 € pour des manquements en lien avec la sécurité des données de santé.Cette affaire débute par une plainte dé...
A popular Russian bulletproof hosting service provider named Media Land was sanctioned by the U.S. Treasury and international partners for its alleged support of ransomware gangs and other cybercriminal operations.
The new threat landscape The line between cyber warfare and traditional kinetic operations is rapidly blurring. Recent investigations by Amazon threat intelligence teams have uncovered a new trend that they’re calling cyber-enabled kinetic targeting in which nation-state threat actors systematically...
One of the more surprising — and least visible — frontiers of artificial intelligence today is unfolding at the extreme edges of our hyper-connected systems.
Related: AI adoption outpacing controls
Think sensors in forests that detect illegal logging. Smart speakers … (more…)
The post FIRESIDE CHAT...
Amazon threat intelligence experts have documented two cases in which Iran leveraged hacking to prepare for kinetic attacks.
The post Amazon Details Iran’s Cyber-Enabled Kinetic Attacks Linking Digital Spying to Physical Strikes appeared first on SecurityWeek.
The company said the boundaries between cyber and physical attacks are dissolving as nation-states use network intrusions to aid military targeting in real time.
The post Amazon warns of global rise in specialized cyber-enabled kinetic targeting appeared first on CyberScoop.
The cybersecurity company has launched Digital Security Teammate (DST), AI agents that investigate, triage, and escalate incidents when needed.
The post Secure.com Raises $4.5 Million for Agentic Security appeared first on SecurityWeek.