> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
A currently undisclosed issue has crippled Cloudflare’s network and has rendered a large swathe of internet’s most popular sites and services temporily inaccessible today. Some of the sites and services affected by the Cloudflare outage (Source: Down Detector) What happened? Cloudflare is a crucial...
DoorDash says a social engineering attack led to a data breach exposing names, addresses, emails, and phone numbers of users, Dashers, and merchants. U.S.-based food delivery and logistics company DoorDash announced that a social engineering attack led to a data breach. “Our team recently identified...
Tycoon 2FA enables turnkey real-time MFA relays behind 64,000+ attacks this year, proving legacy MFA collapses the moment a phishing kit targets it. Learn from Token Ring how biometric, phishing-proof FIDO2 hardware blocks these relay attacks before they succeed. [...]
Learn why legacy approaches fail to stop modern API threats and show how dedicated API security delivers the visibility, protection, and automation needed to defend against today’s evolving risks.
The post Webinar Today: Protecting What WAFs and Gateways Can’t See – Register appeared first on Securi...
Tycoon 2FA enables turnkey real-time MFA relays behind 64,000+ attacks this year, proving legacy MFA collapses the moment a phishing kit targets it. Learn from Token Ring how biometric, phishing-proof FIDO2 hardware blocks these relay attacks before they succeed. [...]
It was discovered that Lasso incorrectly handled certain malformed SAML
responses. A remote attacker could possibly use this issue to cause Lasso
to crash, resulting in a denial of service. (CVE-2025-46404)
It was discovered that Lasso incorrectly handled certain malformed SAML
assertion responses....
Austin, TX/USA, 18th November 2025, CyberNewsWire
The post SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026 appeared first on Security Boulevard.
“From logging in and connecting to Entra ID to seeing our first actionable findings — it took less than 45 minutes."
The company will use the investment to accelerate product development, expand go-to-market operations, and hire new talent.
The post Apono Raises $34 Million for Cloud Identity Management Platform appeared first on SecurityWeek.
A major US real estate firm has been targeted with an advanced intrusion attempt using Tuoni C2, combining social engineering, steganography and in-memory attacks
The fresh investment will be used to accelerate product innovation and to expand the company’s go-to-market efforts.
The post Nudge Security Raises $22.5 Million in Series A Funding appeared first on SecurityWeek.
See how Mend.io's Risk Reduction Dashboard works.
The post AppSec metrics fail, Mend.io’s Risk Reduction Dashboard fixes it appeared first on Security Boulevard.
Energieversorger müssen ihre Systeme vor immer raffinierteren Cyberangriffen schützen.vectorfusionart – shutterstock.com
Die Energieversorgung ist das RĂĽckgrat moderner Gesellschaften. Stromnetze, Gaspipelines und digitale Steuerungssysteme bilden die Grundlage fĂĽr Industrie...
It was the way DoorDash handled the communication of the breach, as much as the data leaked, that has angered customers.
DoorDash has confirmed an October 2025 data breach that exposed customer names, phone numbers, addresses and email details
Kentik has launched the Kentik AI Advisor, an agentic AI solution that understands enterprise and service provider networks, thinks critically, and offers guidance for designing, operating, and protecting infrastructure at scale. “We’ve been using Kentik AI Advisor in early access, and it’s already...
By plugging tens of billions of phone numbers into WhatsApp’s contact discovery tool, researchers found “the most extensive exposure of phone numbers” ever—along with profile photos and more.
Cybersecurity researchers have disclosed details of a cyber attack targeting a major U.S.-based real-estate company that involved the use of a nascent command-and-control (C2) and red teaming framework known as Tuoni.
"The campaign leveraged the emerging Tuoni C2 framework, a relatively new, command...
Tenable has launched Tenable Cloud Vulnerability Management — a powerful new offering within Tenable One — to help vulnerability management leaders identify, prioritize, and remediate exposures across multi-cloud and hybrid environments.Â
Key takeaways
Agentless inventory and visibility: Achieve...
Auf der Website der Stadtwerke Detmold befindet sich aktuell ein Banner mit einem Hinweis zu einer IT-Störung.Stadtwerke Detmold – Screenshot
Die Stadtwerke Detmold informieren ihre Kunden aktuell über einen großflächigen IT-Ausfall. Demnach funktionieren derzeit weder die O...