[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (6 articles)

|

// AI-powered summary generated at 04:00

> Identity Is Now the Top Source of Cloud Risk
ReliaQuest data reveals identity issues were responsible for 44% of cloud security alerts in Q3
> 2025 Insider Risk Report Finds Most Organizations Struggle to Detect and Predict Insider Risks
Baltimore, USA, 4th November 2025, CyberNewsWire The post 2025 Insider Risk Report Finds Most Organizations Struggle to Detect and Predict Insider Risks appeared first on Security Boulevard.
> “Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps
Think you’re just checking the news? A particularly sneaky Android Trojan has other plans—like stealing your banking details.
> Louvre delayed Windows security updates ahead of burglary
The Louvre Museum in Paris, victim of an audacious burglary involving a furniture lift last month, has been struggling for over a decade to upgrade outdated software, including that controlling its video surveillance systems, according to a French newspaper report. Thieves...
> AI Agents Mark the End of Traditional GRC 
AI agents are transforming governance and compliance from slow, manual processes into real-time, autonomous systems. By eliminating data silos, automating risk assessments, and enabling multi-modal collaboration, enterprises can achieve governance at Mach speed. The post AI Agents Mark the End of T...
> InfoSec News Nuggets 11/04/2025
Hackers use RMM tools to breach freighters and steal cargo shipments Threat actors are targeting freight brokers and trucking carriers with malicious links and emails to deploy remote monitoring and management tools (RMMs) that enable them to hijack cargo and steal physical goods. Researchers tracke...
> Cybersécurité du Louvre : des mots de passe inacceptables et des systÚmes obsolÚtes !
Le cambriolage au musée du Louvre a révélé des failles importantes au niveau du systÚme informatique, avec des mots de passe faibles et des systÚmes obsolÚtes. The post Cybersécurité du Louvre : des mots de passe inacceptables et des systÚmes obsolÚtes ! first appeared on IT-Connect.
> Apple Patches Everything, Again, (Tue, Nov 4th)
Apple released its expected set of operating system upgrades. This is a minor feature upgrade that also includes fixes for 110 different vulnerabilities. As usual for Apple, many of the vulnerabilities affect multiple operating systems. None of the vulnerabilities is marked as already exploited. App...
> OpenAI API moonlights as malware HQ in Microsoft’s latest discovery
Redmond uncovers SesameOp, a backdoor hiding its tracks by using OpenAI’s Assistants API as a command channel Hackers have found a new use for OpenAI's Assistants API – not to write poems or code, but to secretly control malware.

> Cybercriminals Targeting Payroll Sites
Microsoft is warning of a scam involving online payroll systems. Criminals use social engineering to steal people’s credentials, and then divert direct deposits into accounts that they control. Sometimes they do other things to make it harder for the victim to realize what is happening. I feel like...
> Former ransomware negotiators allegedly targeted US firms with ALPHV/BlackCat ransomware
A ransomware negotiator and an incident response manager have been indicted in Florida for allegedly conspiring to deploy the ALPHV/BlackCat ransomware against multiple US companies and extorting nearly $1.3 million from one of the victims. According to a federal grand jury indictment unsealed in th...
> Deepwatch Launches NEXAℱ: The MDR Industry’s First Collaborative Agentic AI Ecosystem for Unparalleled Security Outcomes
Intelligent AI agents work in collaboration with humans to redefine MDR with clear, actionable insights that accelerate threat resolution and strengthen security posture Palo Alto, CA—November 4, 2025—Deepwatch, the leader in Precision MDR powered by AI and humans, today announced Deepwatch NEXA, th...
> New backdoor ‘SesameOp’ abuses OpenAI Assistants API for stealthy C2 operations
In a newly uncovered campaign, threat actors embedded a previously undocumented backdoor, dubbed SesameOp, which exploits the OpenAI Assistants API for relaying commands and exfiltrating results. According to researchers at Microsoft, the campaign was active for months befo...
> K-12 Google & Microsoft Security and Safety Through a “Single Pane of Glass”
Cloud Monitor Helps Tyrone Area School District’s IT Team Keep Accounts Secure, Students Safe, and Security Budget Justified Tyrone Area School District, located in Tyrone, Pennsylvania, serves a community of approximately 1,700 students and 300 faculty and staff. The district uses Google Workspace...
> Google Big Sleep found five vulnerabilities in Safari
Google’s AI agent, Big Sleep, helped Apple discover five WebKit flaws in Safari that could lead to browser crashes or memory corruption. Google’s AI agent Big Sleep helped Apple discover five WebKit flaws in Safari that could lead to browser crashes or memory corruption if exploited. Big Sleep is an...
> European authorities dismantle €600 million crypto scam network
Nine people have been arrested in a coordinated international operation targeting a large cryptocurrency money laundering network that defrauded victims of more than €600 million. The operation was led by Eurojust, the EU’s judicial cooperation agency, which brought together investigators and prosec...
> Apple Patches 19 WebKit Vulnerabilities 
Apple has released iOS 26.1 and macOS Tahoe 26.1 with patches for over 100 vulnerabilities, including critical flaws. The post Apple Patches 19 WebKit Vulnerabilities  appeared first on SecurityWeek.
> Ransomware Defense Using the Wazuh Open Source Platform
Ransomware is malicious software designed to block access to a computer system or encrypt data until a ransom is paid. This cyberattack is one of the most prevalent and damaging threats in the digital landscape, affecting individuals, businesses, and critical infrastructure worldwide. A ransomware a...
> Carol Brooks, Cyber Psychologist, Platinum 3P
Explore how psychology, resilience, and decision-making intersect in covert cyber investigations in our latest Forensic Focus interview with Carol Brooks.
> Closing the Application Layer Security Blind Spot with Contrast & Microsoft Sentinel | Contrast Security
Microsoft Sentinel has rapidly become a cornerstone for security operations, offering powerful, cloud-native Security Information and Event Management (SIEM) capabilities. Security Operations Center (SOC) teams rely on it to get a unified view of the organization's security posture. However, w...