> TODAY'S SUMMARY (8 articles)
Today's cyber news highlights significant threats and vulnerabilities. The FBI has seized $1.2 billion in cryptocurrency linked to North Korean hackers, who are also implicated in a $400 million social engineering scheme. This operation involved using video call deception to trick victims. In software security, several vulnerabilities in Ubuntu products have been addressed, including fixes for x11vnc's insecure shared memory permissions, TigerVNC's server impersonation risks, and the signing-party's potential for executing malicious commands via crafted OpenPGP keys. Additionally, updates for SA-Exim and Ruby OpenID have been released to mitigate risks of unsafe rule evaluations and server-side request forgery, respectively.
|
// AI-powered summary generated at 04:01
Today, Fortinet released security updates to patch a new FortiWeb zero-day vulnerability that threat actors are actively exploiting in attacks. [...]
Several security issues were fixed in Lasso.
The malware authors associated with a Phishing-as-a-Service (PhaaS) kit known as Sneaky 2FA have incorporated Browser-in-the-Browser (BitB) functionality into their arsenal, underscoring the continued evolution of such offerings and further making it easier for less-skilled threat actors to mount at...
Regulator sides with telcos that claimed new cybersecurity duties were too ‘burdensome’ The Federal Communications Commission (FCC) will vote this week on whether to scrap Biden-era cybersecurity rules, enacted after the Salt Typhoon attacks came to light in 2024, that required telecom carriers to a...
For the third time in recent months, Google has found itself scrambling to fix a potentially serious zero-day flaw in the Chrome browser’s V8 JavaScript engine.
Addressed on Monday as part of an emergency ‘out-of-band’ patch, the vulnerability identified as CVE-2025-13223 w...
EFF and the ACLU of Northern California Sue on Behalf of Local Nonprofits Contact: Josh Richman, EFF, [email protected]; Carmen King, ACLU of Northern California, [email protected]
SAN JOSE, Calif. – San Jose and its police department routinely violate the California Constitution by conducting warran...
Major online services such as ChatGPT, X, and Shopify were disrupted in a, as well as transit and city services.
The post Cloudflare Outage Not Caused by Cyberattack appeared first on SecurityWeek.
Google has released an update to patch two high-severity vulnerabilities, one of which is already under active exploitation.
Executives and their families have become high-value targets for cyberthreats, and the risks now extend beyond the corporate network. As threat actors leverage easily accessible personal data, organizations face growing challenges in protecting senior leaders whose personal digital lives often fall...
Voting was not disrupted Tuesday by a wave of DDoS incidents affecting political party and government websites in Denmark a day earlier, officials said.
When? Sean Cairncross wouldn't say America is fed up with being the prime target for foreign hackers. So US National Cyber Director Sean Cairncross says Uncle Sam is going on the offensive – he just isn't saying when.…
Seventh Chrome 0-day this year Google pushed an emergency patch on Monday for a high-severity Chrome bug that attackers have already found and exploited in the wild.…
Microsoft announced today that it will integrate Sysmon natively into Windows 11 and Windows Server 2025 next year, making it unnecessary to deploy the standalone Sysinternals tools. [...]
AWS Systems Manager Session Manager is a fully managed service that provides secure, interactive, one-click access to your Amazon Elastic Compute Cloud (Amazon EC2) instances, edge devices, and virtual machines (VMs) through a browser-based shell or AWS Command Line Interface (AWS CLI), without requ...
Le Contrôleur européen de la protection des données (CEPD) a publié de nouvelles orientations pour aider les responsables du traitement à réaliser des analyses de risques relatives aux systèmes d'intelligence artificielle.Publiées le 11 novembre 2025, ces orientations visent à fournir des recommanda...
Microsoft says that Teams users will be able to report false-positive threat alerts triggered by messages incorrectly flagged as malicious. [...]
L'Agence espagnole de protection des données (AEPD) a publié un guide pratique sur le chiffrement destiné aux travailleurs indépendants et aux petites et moyennes entreprises (PME) afin de les aider à sécuriser les traitements de données personnelles.Ce document fournit des outils et des connaissanc...
L'Autorité Nationale de Surveillance du Traitement des Données à Caractère Personnel (ANSPDCP) roumaine a publié une décision de sanction à l'encontre d'un cabinet d'avocat, comprenant le prononcé d'une amende de 20 000 lei (environ 4 024 €), pour des manquements en lien avec l'utilisation de cookie...
The upcoming strategy would contain six “pillars” — with one focused on “shaping adversary behavior” and another on public-private partnerships, Sean Cairncross said.
L'Agence Espagnole de Protection des Données (AEPD) a aujourd'hui publié une décision de sanction à l'encontre de MEYDIS, S.L. (comprenant le prononcé d'une amende de 80 000 €) pour des manquements en lien avec son obligation de coopération lors d'une enquête.Cette affaire débute par une plainte dép...