> TODAY'S SUMMARY (8 articles)
Today's cyber news highlights significant threats and vulnerabilities. The FBI has seized $1.2 billion in cryptocurrency linked to North Korean hackers, who are also implicated in a $400 million social engineering scheme. This operation involved using video call deception to trick victims. In software security, several vulnerabilities in Ubuntu products have been addressed, including fixes for x11vnc's insecure shared memory permissions, TigerVNC's server impersonation risks, and the signing-party's potential for executing malicious commands via crafted OpenPGP keys. Additionally, updates for SA-Exim and Ruby OpenID have been released to mitigate risks of unsafe rule evaluations and server-side request forgery, respectively.
|
// AI-powered summary generated at 04:01
The security vendor silently patched a vulnerability, but did not assign the flaw a CVE or publicly disclosed its existence until 17 days later. By then, widespread attacks were already underway.
The post Fortinet’s delayed alert on actively exploited defect put defenders at a disadvantage appeared...
The letter comes as countries in Europe have moved over the past year to regulate or mandate legalized access for criminal and national security investigations.
The post Dozens of groups call for governments to protect encryption appeared first on CyberScoop.
CVE-2025-20333 and CVE-2025-20362 Details Cisco disclosed a new active attack variant targeting and exploiting the previously known vulnerabilities in the Cisco Secure Firewall ASA and FTDÂ software (CVE-2025-20333 and CVE-2025-20362) leading to unpatched devices to reboot/reload unexpectedly creati...
SESSION
Session 3B: Wireless, Cellular & Satellite Security
-----------
-----------
Authors, Creators & Presenters: Tyler Tucker (University of Florida), Nathaniel Bennett (University of Florida), Martin Kotuliak (ETH Zurich), Simon Erni (ETH Zurich), Srdjan Capkun (ETH Zuerich), Kevin Butle...
Social Security numbers and medical information were among the data stolen in an August breach of the networks of Pennsylvania's attorney general, officials said.
Claims he reported the attack in January after fraudsters tried to scam him A security researcher says Coinbase knew about a December 2024 security breach during which miscreants bribed its support staff into handing over almost 70,000 customers' details at least four months before it disclosed the...
Following our recent announcement of ML-DSA support in AWS Key Management Service (AWS KMS), we just introduced post-quantum ML-DSA signature support in AWS Private Certificate Authority (AWS Private CA). Customers can use AWS Private CA to create and manage their own private public key infrastructu...
A Princeton University database was compromised in a cyberattack on November 10, exposing the personal information of alumni, donors, faculty members, and students. [...]
The post Foundational Flaws: How Simple Security Missteps Cost You appeared first on AI Security Automation.
The post Foundational Flaws: How Simple Security Missteps Cost You appeared first on Security Boulevard.
The filing comes one week after the Clop cybercriminal organization claimed it stole information from Logitech through a zero-day vulnerability in Oracle’s E-Business Suite tool.
The police in the Netherlands have seized around 250 physical servers powering a bulletproof hosting service in the country used exclusively by cybercriminals for providing complete anonymity. [...]
Microsoft says the Aisuru botnet launched a 15.7 Tbps DDoS on Azure from 500k IPs, using massive UDP floods peaking at 3.6 B pps. On October 24, 2025, Azure DDoS Protection detected and mitigated a massive multi-vector attack peaking at 15.72 Tbps and 3.64 billion pps, the largest cloud DDoS ever re...
Le Conseil de l'Union européenne a adopté un nouveau règlement visant à accélérer le traitement des plaintes transfrontalières en matière de protection des données.Ce règlement introduit des mesures pour rendre l'application du RGPD plus efficace dans les cas transfrontaliers, notamment en harmonisa...
New intelligence from KasadaIQ and StockX highlights where holiday demand and bot attacks are headed next. Get a quick look at the categories driving shopper frenzy and the defense strategies retailers should prioritize going into Black Friday.
The post Black Friday Bot Warning: The Products to Prot...
L'autorité espagnole de protection des données (AEPD) a publié une décision de sanction à l'encontre du Vice-ministère de l'administration locale et de la coordination administrative pour des manquements liés à la confidentialité des données personnelles lors de l'envoi d'un courriel de masse.Cette...
La Commission Nationale de l'Informatique et des Libertés (CNIL) a publié les résultats d'un sondage sur la perception des Français concernant la monétisation de leurs données personnelles.L'autorité rappelle que la cession d'un droit de propriété sur ses données est juridiquement impossible, les dr...
When high-stakes events meet unprecedented attack volumes, disruption can be devastating. A Turkish luxury retail platform experienced this firsthand when it was hit with a record-breaking application-layer DDoS attack, peaking at 14.2 million requests per second (RPS). This marks the largest DDoS a...
L'Agence Espagnole de Protection des Données (AEPD) a publié une décision prononçant un avertissement à l'encontre d'un syndicat de copropriétaires pour des manquements liés à la confidentialité des données personnelles.Cette affaire débute par deux plaintes distinctes, signalant la publication du n...
L’autorité polonaise de protection des données a publié une décision de sanction à l’encontre d’un huissier de justice, comprenant le prononcé d’une amende de 20 900 € (environ 97 000 PLN) pour des manquements liés à la notification tardive d’une violation de données personnelles et au défaut d’info...
White-hat hacker and pentester Kamel Ghali talks with the Click Here podcast team about how cars became computers on wheels — and why, in the race for smarter tech, safety is still trying to catch up.