> TODAY'S SUMMARY (8 articles)
Today's cyber news highlights significant threats and vulnerabilities. The FBI has seized $1.2 billion in cryptocurrency linked to North Korean hackers, who are also implicated in a $400 million social engineering scheme. This operation involved using video call deception to trick victims. In software security, several vulnerabilities in Ubuntu products have been addressed, including fixes for x11vnc's insecure shared memory permissions, TigerVNC's server impersonation risks, and the signing-party's potential for executing malicious commands via crafted OpenPGP keys. Additionally, updates for SA-Exim and Ruby OpenID have been released to mitigate risks of unsafe rule evaluations and server-side request forgery, respectively.
|
// AI-powered summary generated at 04:01
Company 'clearly delighted' with the outcome The US Securities and Exchange Commission (SEC) has abandoned the lawsuit it pursued against SolarWinds and its chief infosec officer for misleading investors about security practices that led to the 2020 SUNBURST attack.âŠ
The Securities and Exchange Commission on Thursday dropped its case against SolarWinds and its chief information security officer over its handling of an alleged Russian cyberespionage campaign uncovered in 2020, an incident that penetrated at least nine federal agencies and hundreds of companies. T...
The widespread compromise is strikingly similar to a previous attack that originated at Salesloft Drift.
The post Hundreds of Salesforce customers hit by yet another third-party vendor breach appeared first on CyberScoop.
Salesforce posted a message on its website saying an investigation revealed that the activity âmay have enabled unauthorized access to certain customersâ Salesforce data through the appâs connection.â
The spyware vendor made those two arguments, among others, in a motion to stay the California court ruling.
The post NSO Group argues WhatsApp injunction threatens existence, future U.S. government work appeared first on CyberScoop.
Key Takeaways What is Unified AI Oversight? In todayâs AI landscape, organizations face overlapping regulations, ethical expectations, and AI operational risks. Unified AI oversight is a single lens to manage AI systems while staying aligned with global rules, reducing blind spots and duplication. I...
Researchers disclosed a WhatsApp flaw that exposed 3.5B accounts. Meta has patched it to prevent this mass enumeration. A team of researchers at the University of Vienna found a WhatsApp flaw that could scrape 3.5 billion accounts. Meta has since patched the vulnerability to block this enumeration t...
Weâre pleased to announce the availability of the latest sample security baseline from Landing Zone Accelerator on AWS (LZA)âthe Universal Configuration. Developed from years of field experience with highly regulated customers including governments across the world, and in consultation with AWS Part...
ImageMagick could be made to crash or run programs as your login if it opened a specially crafted file.
A federal prosecutor alleged that one defendant boasted that his father âhad engaged in similar business for the Chinese Communist Party.â
In November 2025, the International Kiteboarding Organization suffered a data breach that exposed 340k user records. The data was subsequently listed for sale on a hacking forum and included email addresses, names, usernames and in many cases, the user's city and country.
The report, which is based on an investigation begun by the Privacy and Civil Liberties Oversight Board (PCLOB) in 2017, provides an overview of what open-source information the FBI consults in such investigations.
Thailandâs Cyber Crime Investigation Bureau said an FBI tip that the âworld-class hackerâ was traveling to Thailand led to his arrest in Phuket.
The post Russian Hacking Suspect Wanted by the FBI Arrested on Thai Resort Island appeared first on SecurityWeek.
China-linked APT24 hackers have been using a previously undocumented malware called BadAudio in a three-year espionage campaign that recently switched to more sophisticated attack methods. [...]
Zoom CEO Eric Yuan recently used his AI avatar to open a quarterly earnings call. In the top right corner of the video, a small badge appeared: "CREATED WITH ZOOM AI COMPANION."
The post Zoomâs AI Avatar Watermark Is Security Theatre (And Attackers Already Know It) appeared first on Security B...
Are Budget-Friendly Security Measures Adequate for Managing Non-Human Identities? Where digital transformation is reshaping industries, the question of whether budget-friendly security solutions are adequate for managing Non-Human Identities (NHIs) has become increasingly pertinent. The proliferatio...
Des services MDR certifiés aux frameworks Threat-Intelligence ouverts, Sophos apporte la clarté, le contexte et la confiance dont les organisations ont besoin pour garder une longueur d'avance sur l'évolution des menaces.
How Can Enterprises Make Informed Decisions About Scalable Agentic AI Solutions? Are enterprises truly free to choose scalable Agentic AI solutions that align with their evolving security needs? This question resonates across industries with organizations grapple with the complexities of integrating...
How Does Stability in AI Systems Enhance Cloud Security? Have you ever wondered how stable AI systems can revolutionize your organizationâs cloud security? When industries evolve, the integration of AI into cybersecurity provides unique opportunities to enhance security measures, ensuring a safe and...
Samsung is under fire again for shipping phones in parts of the world with a hidden system app, AppCloud, that users canât easily remove.