> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity landscape highlights several key developments and threats. Michael LoSapio has been nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), a move that may encounter political challenges. SonicWall has issued urgent patches for seven vulnerabilities in its firewalls, with five allowing unauthenticated remote access—an indication of increasing risks to network security. Meanwhile, Microsoft’s email security filters are mistakenly blocking legitimate business communications, raising concerns about the reliability of automated security measures. Lastly, Anthropic's advanced bug-finding tool, Mythos, will be integrated into Cisco and IBM products, enhancing enterprise security capabilities without exposing the underlying model. Overall, these updates reflect ongoing vulnerabilities and the need for robust cybersecurity measures in both enterprise and governmental contexts.
|
// AI-powered summary generated at 04:00
The nascent collective that combines three prominent cybercrime groups, Scattered Spider, LAPSUS$, and ShinyHunters, has created no less than 16 Telegram channels since August 8, 2025.
"Since its debut, the group's Telegram channels have been removed and recreated at least 16 times under varying ite...
Un piratage de plus de 120 millions de dollars vise Balancer, exposant la vulnérabilité croissante des protocoles DeFi face aux cyberattaques sophistiquées....
Journalists in Europe found it was "easy" to spy on top European Union officials using commercially obtained location data sold by data brokers, despite the continent having some of the strongest data protection laws in the world.
Une fausse note militaire biélorusse dissimule une porte dérobée via Tor, rappelant les méthodes du groupe APT Sandworm....
Microsoft found a new backdoor, SesameOp, using the OpenAI Assistants API for stealthy command-and-control in hacked systems. Microsoft uncovered a new backdoor, named SesameOp, that abuses the OpenAI Assistants API for command-and-control, allowing covert communication within compromised systems. M...
This new e-book showcases what generative AI can do for your SOC, from reducing alert fatigue and enabling quicker triage to getting ahead of cyberattacks with proactive threat hunting, and more.
The post ​​Learn what generative AI can do for your security operations center appeared first on Microso...
Akira revendique une attaque contre Apache OpenOffice et menace de publier 23 Go de données internes de la Fondation Apache....
The Swedish Authority for Privacy Protection (IMY) is investigating a cyberattack on IT systems supplier Miljödata that exposed data belonging to 1.5 million people. [...]
In early November, the Israeli Defense Forces made a decision that sent ripples through defense and cybersecurity circles worldwide: withdraw every Chinese-manufactured vehicle from its senior officer fleet. The IDF marked approximately 700 cars, predominantly the Chery Tiggo 8 Pro model, for remov...
Mayhem, which won the 2016 DARPA Cyber Grand Challenge, will have all its employees join Bugcrowd.
The post Bugcrowd acquires Mayhem Security to advance AI-powered security testing appeared first on CyberScoop.
Japanese publishing giant Nikkei announced earlier today that its Slack messaging platform had been compromised, exposing the personal information of over 17,000 employees and business partners. [...]
Sen. Bill Cassidy (R-LA) on Tuesday introduced legislation that would add new privacy protections to health data gathered by smartwatches, health apps and other new technologies.
Discover how the latest NERC CIP standard for Internal Network Security Monitoring (INSM) shifts the focus inside your network, and how Tenable can help deliver the comprehensive visibility required to achieve compliance and enhance security.
Key takeaways:
NERC CIP-015 mandates Internal Network S...
Des chercheurs exposent une faille critique dans le navigateur Atlas d’OpenAI, vulnérable aux injections de requêtes cachées via des URL....
Arbitrary command/code execution has been demonstrated through the exploitation of CVE-2025-11953 on Windows, macOS and Linux.Â
The post Critical Flaw in Popular React Native NPM Package Exposes Developers to Attacks appeared first on SecurityWeek.
Unbound could be made to hijack domains if it received specially crafted network traffic.
SESSION Session 1D: System-Level Security
Authors, Creators & Presenters: Shixin Song (Massachusetts Institute of Technology), Joseph Zhang (Massachusetts Institute of Technology), Mengjia Yan (Massachusetts Institute of Technology)
PAPER
Oreo: Protecting ASLR Against Microarchitectural Attacks...
Our Vulnerability Researchers uncovered vulnerabilities in the code of Ollama, a popular tool to run LLMs locally. Dive into the details of how LLMs are implemented and what can go wrong.
The post Ollama Remote Code Execution: Securing the Code That Runs LLMs appeared first on Security Boulevard.
Nine people have been arrested in connection with a coordinated law enforcement operation that targeted a cryptocurrency money laundering network that defrauded victims of €600 million (~$688 million).
According to a statement released by Eurojust today, the action took place between October 27 and...
Nine alleged crypto scammers arrested in Cyprus, Germany and Spain