> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
The Inc Ransom group has taken credit for the hack, claiming to have stolen several terabytes of data.Â
The post Pennsylvania Attorney General Confirms Data Breach After Ransomware Attack appeared first on SecurityWeek.
Hackers accessed a database containing information about alumni, donors, faculty, students, parents, and other individuals.
The post Princeton University Data Breach Impacts Alumni, Students, Employees appeared first on SecurityWeek.
The PILLAR Act, which would renew federal cybersecurity grants to state and local governments through 2033, passed by voice vote in the House.
Suspected espionage-driven threat actors from Iran have been observed deploying backdoors like TWOSTROKE and DEEPROOT as part of continued attacks aimed at aerospace, aviation, and defense industries in the Middle East.
The activity has been attributed by Google-owned Mandiant to a threat cluster tr...
They can probably set up a printer faster, but look elsewhere for cryptography advice Gen Z can get off their digital high horses because their passwords are no more secure than their grandparents'.…
Choosing Cloud Monitor Provides Stronger Safety Alerts, Cybersecurity Protection, and Peace of Mind—All Within Budget At Richland County Community Unit School District #1 in Illinois, Technology Coordinator Ryan Roark has spent 17 years ensuring that students have access to safe, effective learning...
Cloudflare is investigating an outage affecting its global network services, with users encountering "internal server error" messages when attempting to access affected websites and online platforms. [...]
A threat actor exploited a vulnerability, exfiltrated data, and attempted to extort Eurofiber.
The post Data Stolen in Eurofiber France Hack appeared first on SecurityWeek.
Rogue Hosting Company Shut Down as Authorities Confiscate Thousands of Servers Used in Cyberattacks Dutch police and the East Netherlands Cybercrime Team have dismantled a “bulletproof” hosting provider whose infrastructure was allegedly tailored to support criminal activity, including ransomware, p...
Security researchers are warning about two critical vulnerabilities in Fortinet’s FortiWeb appliances, now tracked under CVE-2025-64446, being actively exploited in the wild.
According to findings published by watchTowr, one flaw allows unauthenticated actors to access inte...
Social media has been a familiar, even mundane, part of life for nearly two decades. It can be easy to forget it was not always that way.
In 2008, social media was just emerging into the mainstream. Facebook reached 100 million users that summer. And a singular candidate was integrating social media...
Google has shipped an emergency fix for a Chrome vulnerability (CVE-2025-13223) reported as actively exploited in the wild by its Threat Analysis Group (TAG). About CVE-2025-13223 CVE-2025-13223 is a type confusion vulnerability in V8, the JavaScript and WebAssembly engine used by Chrome and Chromiu...
Trail of Bits is publicly disclosing two vulnerabilities in elliptic, a widely used JavaScript library for elliptic curve cryptography that is downloaded over 10 million times weekly and is used by close to 3,000 projects. These vulnerabilities, caused by missing modular reductions and a missing len...
Jurisdictions worldwide are adapting their approaches to cryptoassets as they increasingly intersect with traditional finance (TradFi), drawing greater numbers of…
The post Breaking Down Brazil’s New Crypto Framework: What You Need to Know by 2026 appeared first on Chainalysis.
You’ve probably already moved some of your business to the cloud—or you’re planning to. That’s a smart move. It helps you work faster, serve your customers better, and stay ahead.
But as your cloud setup grows, it gets harder to control who can access what.
Even one small mistake—like the wrong pers...
Those too-good-to-be-true online deals often come from drop-shipping sellers, and that can leave you holding all the risk.
Azure has blocked its largest DDoS attack to date, a 15.72 Tbps strike linked to the Aisuru IoT botnet that also surged to nearly 3.64 billion packets per second and targeted a single cloud endpoint in Australia, Microsoft said.
“The attack involved extremely high-rate UDP...
Empower HR, legal and forensic teams to investigate faster with collaborative, accessible digital evidence tools.
Amid relentless cyberattacks and shrinking support, CISOs are experiencing historic levels of burnout—putting both critical infrastructure and enterprise resilience at risk.
The post The realities of CISO burnout and exhaustion appeared first on CyberScoop.
Identity security fabric (ISF) is a unified architectural framework that brings together disparate identity capabilities. Through ISF, identity governance and administration (IGA), access management (AM), privileged access management (PAM), and identity threat detection and response (ITDR) are all i...