> TODAY'S SUMMARY (22 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Fireworks AI has reported a breach stemming from a third-party cloud hack, emphasizing the risks associated with relying on external providers. France has attributed a cyberattack that affected supermarket refrigeration systems to Iranian operatives, signaling geopolitical tensions in cyberspace. Meanwhile, CISA has warned of active exploitation of multiple security flaws in key software, including OpenSSH and IBM products. Additionally, N-able has taken its N-central Cloud offline after the disclosure of 33 zero-day vulnerabilities. On the consumer side, a data breach at Iris Ohyama may expose personal information of 7.7 million individuals. Lastly, Google has issued a security update for Chrome, addressing the eighth actively exploited zero-day this year.
|
// AI-powered summary generated at 08:00
La Devereux Foundation a détecté une activité suspecte dans ses systèmes électroniques le 9 novembre 2025, ce qui pourrait avoir un impact sur la confidentialité des informations relatives à certaines personnes, notamment des employés, des clients, des donateurs, des payeurs et des partenaires comme...
OpenAI is preparing the GPT-5.1 family for public rollout. This includes GPT-5.1 (base), GPT-5.1 Reasoning, and GPT-5.1 Pro for those who pay a $200 monthly subscription. [...]
Are Organizations Maximizing the Potential of Non-Human Identities? The importance of managing Non-Human Identities (NHIs) cannot be overstated. But how effectively are organizations leveraging these capabilities to enhance stable cybersecurity? NHIs—often referred to as machine identities—are pivot...
Are Your Non-Human Identities Truly Secure? When we delve deeper where cloud environments dominate, the concept of Non-Human Identities (NHIs) is increasingly coming to the forefront of cybersecurity discussions. But what exactly are NHIs, and why is their management crucial for robust security meas...
A China-linked group targeted a U.S. non-profit to gain long-term access, part of wider attacks on U.S. entities tied to policy matters. China-linked hackers breached a U.S. policy-focused nonprofit in April 2025, maintaining weeks of access. They used DLL sideloading via vetysafe.exe, a tactic used...
How Are Non-Human Identities Reshaping Cybersecurity Solutions? How often have you considered the role of machine identities? With more enterprises migrate their operations to the cloud, the management of Non-Human Identities (NHIs) has become paramount. These machine identities, which include every...
How Do Non-Human Identities (NHIs) Transform Cloud Security? Can your organization afford to overlook the security of Non-Human Identities? Machine identities have become as crucial as human identities, bringing unique challenges and opportunities for cybersecurity experts around the globe. The mana...
An Italian political adviser was targeted with Paragon’s Graphite spyware, becoming the fifth Italian in the ongoing government surveillance activity. Italian political adviser Francesco Nicodemo said he was targeted with Paragon’s Graphite spyware, becoming the fifth Italian in the ongoing governme...
The days of human analysts manually sorting through endless security alerts are numbered. By 2028, artificial intelligence (AI) agents will handle 80% of that work in most security operations centers worldwide, according to a new IDC report. But while AI promises to revolutionize defense, it’s also...
This week, three very different data breaches proved one thing: no sector is safe. From nation-state espionage to data theft to social engineering, the tactics vary — but the results are the same: exposed data, shaken trust, and hard lessons. Here’s what happened: 🔒 SonicWall — A nation-state actor...
The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with three new VSCode extensions that have already been downloaded over 10,000 times. [...]
AI agents are increasingly being used to search the web, making traditional bot mitigation systems inadequate and opening the door for malicious actors to develop and deploy bots that impersonate legitimate agents from AI vendors to launch account takeover and financial fraud attacks.
The post Radw...
SESSION
Session 2C: Phishing & Fraud 1
Authors, Creators & Presenters: Jens Christian Opdenbusch (Ruhr University Bochum), Jonas Hielscher (Ruhr University Bochum), M. Angela Sasse (Ruhr University Bochum, University College London)
PAPER
"Where Are We On Cyber?" - A Qualitative Study On Bo...
With the first Patch Tuesday following Windows 10's end of support approaching next week, users who continue to run the operating system should enroll in the Extended Security Updates (ESU) program to remain protected against newly discovered security vulnerabilities. [...]
Microsoft has disclosed details of a novel side-channel attack targeting remote language models that could enable a passive adversary with capabilities to observe network traffic to glean details about model conversation topics despite encryption protections under certain circumstances.
This leakage...
Esra'a Al Shafei spoke with The Reg about the spy tech 'global trade' interview Digital rights activist Esra'a Al Shafei found FinFisher spyware on her device more than a decade ago. Now she's made it her mission to surveil the companies providing surveillanceware, their customers, and their funder...
In the race to build and release software faster, many organizations unintentionally overlook one critical aspect: security and process integrity within the Software Development Life Cycle (SDLC). Every missed control or overlooked best practice in the SDLC can lead to significant risks from vulnera...
In late October 2025, data breached from the Hungarian political party TISZA was published online before being extensively redistributed. Stemming from a compromise of the TISZA Világ service earlier in the month, the breach exposed 200k records of personal data including email addresses along with...
Des centaines d’applications Android malveillantes ont été téléchargées plus de 40 millions de fois sur Google Play entre juin 2024 et mai 2025, alerte ZScaler.
The post 239 applications Android malveillantes cumulent plus de 40 millions de téléchargements ! first appeared on IT-Connect.
This is just a quick diary entry to report that I saw requests on my honeypot for (code) repositories: