[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> InfoSec News Nuggets 11/25/2025
Nationwide Emergency Alert System Crippled by Ransomware INC Ransom attacked OnSolve’s CodeRED emergency notification platform, forcing the company to permanently retire the legacy system and cutting off alerting capabilities for hundreds of US municipalities. The incident also involved exposure of...
> Microsoft: Exchange Online outage blocks access to Outlook mailboxes
Microsoft is investigating an Exchange Online service outage that is preventing customers from accessing their mailboxes using the classic Outlook desktop client. [...]
> Meta is helping fraudsters scam you and doesn’t care
Meta isn't just targeting you with ads, it's coaxing you into scams and banned products. And getting rich in the process.
> New ClickFix wave infects users with hidden malware in images and fake Windows updates
ClickFix just got more convincing, hiding malware in PNG images and faking Windows updates to make users run dangerous commands.
> Popular code formatting sites are exposing credentials and other secrets
Widely used code formatting sites JSONFormatter and CodeBeautify are exposing sensitive credentials, API keys, private keys, configuration files and other secrets, watchTowr researchers discovered. The findings JSONFormatter and CodeBeautify are free, web-based tools/services used by developers to m...
> USN-7889-1: Linux kernel vulnerabilities
Several security issues were discovered in the Linux kernel. An attacker could possibly use these to compromise the system. This update corrects flaws in the following subsystems: - Media drivers; - Network drivers; - Netfilter; - TLS protocol; (CVE-2025-21729, CVE-2025-38227, CVE-2025-38616...
> Smishing Triad Impersonation Campaigns Expand Globally
A cluster of fraudulent domains impersonating Egyptian providers have been identified linked to Smishing Triad operations
> NDSS 2025 – EAGLEYE: Exposing Hidden Web Interfaces In loT Devices Via Routing Analysis
Session4A: IoT Security Authors, Creators & Presenters: Hangtian Liu (Information Engineering University), Lei Zheng (Institute for Network Sciences and Cyberspace (INSC), Tsinghua University), Shuitao Gan (Laboratory for Advanced Computing and Intelligence Engineering), Chao Zhang (Institute fo...
> Life in the Swimlane with Pauline Bacot, Senior Product Marketing Manager
The post Life in the Swimlane with Pauline Bacot, Senior Product Marketing Manager appeared first on AI Security Automation. The post Life in the Swimlane with Pauline Bacot, Senior Product Marketing Manager appeared first on Security Boulevard.
> Découverte du nouveau OWASP Top 10 (2025)
Faisons le tour de la dernière version de l'OWASP Top 10 (2025), une référence incontournable de la sécurité des applications web. The post Découverte du nouveau OWASP Top 10 (2025) first appeared on IT-Connect.
> Don’t Use a Ruler to Measure Wind Speed: Establishing a Standard for Competitive Solutions Testing
Competitive testing is a business-critical function for financial institutions seeking the ideal solutions provider to help optimize their risk management strategies. Don’t get seduced by inflated test results or flowery marketing claims, however. Selecting the right risk solutions could be one of...
> The AI Fix #78: The big AI bubble, and robot Grandma in the cloud
In episode 78 of The AI Fix, alien robot spiders invade Antarctica (or Facebook says they do), Mark prepares humanity for AI-powered fighter jets with loyalty issues, and Graham tries to work out why his AI-generated country music career hasn't yet paid for even a Tesco Meal Deal. Anthropic claim...
> Morphisec warns StealC V2 malware spread through weaponized blender files
StealC V2 spread via malicious Blender files on 3D model sites like CGTrader, abusing Blender’s ability to run hidden Python scripts. Cybersecurity firm Morphisec reported that Russian threat actors are spreading StealC V2 infostealer via weaponized Blender files uploaded to 3D model marketplaces li...
> Russia arrests young cybersecurity entrepreneur on treason charges
Details of the case are classified, but Russian media say Timur Kilin may have drawn official ire after publicly criticizing the state-owned messaging app Max and the government’s anti-cybercrime legislation.
> The Emergence of GPT-4-Powered Ransomware and the Threat to IAM Systems
The cybersecurity landscape is undergoing a profound transformation. Traditional malware, characterized by static code and predictable behaviors, is being eclipsed by a new breed of threats powered by advanced artificial intelligence. A notable example is the emergence of MalTerminal, a malware lev...
> Tor Project is rolling out Counter Galois Onion encryption
People who rely on Tor expect their traffic to move through the network without giving away who they are. That trust depends on the strength of the encryption that protects each hop. Tor developers are preparing a major upgrade called Counter Galois Onion, or CGO, which replaces the long-standing re...
> Telecom security reboot: Why zero trust is the only way forward
Telecom networks are everywhere. They keep the world moving — all the way from managing data, powering business, connecting people across continents and whatnot. For a long time, security in this space was pretty straightforward: build a wall, keep threats outside and trust ev...
> Oracle Linux 8: ELSA-2025-21977 libssh Important Buffer Overflow Fix
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8: ELSA-2025-21917 Kernel Moderate Update DoS Risks
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Microsoft is speeding up the Teams desktop client for Windows
Microsoft says it will add a new Teams call handler beginning in January 2026 to reduce launch times and boost call performance for the Windows desktop client. [...]