> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
Concerns about domestic SIM card use in Ukrainian drones have led the Kremlin to impose a mobile internet "cooling-off period" for anyone returning home to Russia from abroad.
A survey of 500 security practitioners and decision-makers across the United States and Europe published today finds cyberattacks aimed at artificial intelligence (AI) applications are rising, with prompt injections involving large language models (LLMs) at the top of the list (76%), followed by vu...
The suspected Chinese schemers behind it enable those constant fake E-Z Pass and U.S. Postal Service smishing messages.
The post Google files lawsuit against Lighthouse ‘phishing for dummies’ text scammers appeared first on CyberScoop.
L'Autorité de protection des données (APD) a aujourd'hui publié une décision de sanction à l'encontre d'un particulier (comprenant le prononcé d'une réprimande) pour des manquements en lien avec l'installation de caméras de surveillance dans le cadre d'un conflit de voisinage.Cette affaire débute pa...
Le Comité de médiation des litiges relatifs aux données personnelles (Comité de médiation) a décidé qu’il convenait que la société SK Télécom (SKT) verse à chaque requérant 300 000 ₩ (≈ 214 €) en réparation dans une affaire de fuite de données concernant environ 23 000 000 abonnés.Lors de sa 59e séa...
Today, we’re excited to announce the Amazon Elastic Kubernetes Service (Amazon EKS) zero operator access posture. Because security is our top priority at Amazon Web Services (AWS), we designed an operational architecture to meet the data privacy posture our regulated and most stringent customers wan...
La Commission de protection des informations personnelles (CPIP) de Corée du Sud a aujourd'hui publié une décision de sanction à l'encontre de Moncler Corée, comprenant le prononcé d'une amende totale de 88 210 000 wons sud-coréens (environ 59 600 €), pour des manquements liés à la sécurité des donn...
L'Autorité nationale de surveillance du traitement des données à caractère personnel (ANSPDCP) roumaine a publié une décision de sanction à l'encontre de Fan Courier Express S.R.L., comprenant le prononcé d'une amende de 4 000 €, pour des manquements liés au respect des droits des personnes concerné...
After years of delays, the British government introduced its landmark Cyber Security and Resilience Bill to Parliament, threatening large fines for companies that fail to protect themselves from cyberattacks.
The vendors disclosed and patched the defects last summer, but not before advanced attackers exploited the vulnerabilities to likely gain prolonged access for espionage, according to Amazon.
The post Amazon pins Cisco, Citrix zero-day attacks to APT group appeared first on CyberScoop.
The Financial Action Task Force (FATF) recently released new guidance on asset recovery that significantly advances how authorities worldwide should…
The post FATF Issues Comprehensive Guidance on Virtual Asset Recovery: What Law Enforcement Needs to Know appeared first on Chainalysis.
Public Citizen’s letter urges OpenAI to temporarily take Sora 2 offline and work with outside experts to prevent the spread of harmful deepfakes.
The post Advocacy group calls on OpenAI to address Sora 2’s deepfake risks appeared first on CyberScoop.
Microsoft announced that passwordless authentication is now easier on Windows 11 through native support for third-party passkey managers, the first ones supported being 1Password and Bitwarden. [...]
The hackers notably used custom malware and were exploiting CVE-2025-5777 — now known colloquially as “Citrix Bleed Two” — before it was disclosed publicly in July.
Lt. Gen. Joshua Rudd, the No. 2 at U.S. Indo-Pacific Command, has emerged as a potential pick to lead U.S. Cyber Command and the National Security Agency, multiple people familiar with the search told Recorded Future News.
Hat Tip to Verification Labs :: Penetration Testing Specialists :: Trey Blalock GCTI, GWAPT, GCFA, GPEN, GPCS, GCPN, CRISC, CISA, CISM, CISSP, SSCP, CDPSE for recommending this highly entertaining security comic! Original H/T to the original post Nick VanGlider @nickvangilder
The...
Several security issues were fixed in the Linux kernel.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- x86 architecture;
- ACPI drivers;
- Ublk userspace block drive...
Vendors (still) keep mum An "advanced" attacker exploited CitrixBleed 2 and a max-severity Cisco Identity Services Engine (ISE) bug as zero-days to deploy custom malware, according to Amazon Chief Information Security Officer CJ Moses.…
Several security issues were fixed in Bind.