> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
Synnovis, a leading UK pathology services provider, is notifying healthcare providers that a data breach occurred following a ransomware attack in June 2024, which resulted in the theft of some patients' data. [...]
Presently sponsored by: Malwarebytes Browser Guard blocks phishing, ads, scams, and trackers for safer, faster browsingWhat. A. Week. It wasn't just the preceding weeks of technical pain as we tried to work out how to get this data loaded, it was all the subsequent queries we had to deal with too. S...
This article was originally published in The Learning Counsel on 11/5/25 by Charlie Sander. It’s time for district leaders to turn your attention to cybersecurity strategy As the buzz around back-to-school season subsides and teachers and students fall into the rhythm of a new academic year, it’s ti...
La cyberattaque contre Asahi paralyse la production de bière japonaise et révèle les failles technologiques des grandes entreprises face aux ransomwares modernes....
Ivanti and Zoom resolved security defects that could lead to arbitrary file writes, elevation of privilege, code execution, and information disclosure.
The post High-Severity Vulnerabilities Patched by Ivanti and Zoom appeared first on SecurityWeek.
Former DoJ attorney John Carlin writes about hackback, which he defines thus: “A hack back is a type of cyber response that incorporates a counterattack designed to proactively engage with, disable, or collect evidence about an attacker. Although hack backs can take on various forms, they are—Âby de...
A malicious npm package named “@acitons/artifact” was found impersonating the legitimate “@actions/artifact” module, directly targeting the CI/CD pipelines within GitHub Actions workflows.
According to Veracode findings, the package was uploaded on November 7 and was design...
Every day, security teams face the same problem—too many risks, too many alerts, and not enough time. You fix one issue, and three more show up. It feels like you’re always one step behind.
But what if there was a smarter way to stay ahead—without adding more work or stress?
Join The Hacker News and...
This month’s Windows update closes several major security holes, including one that’s already being used by attackers. Make sure your PC is up to date.
Europol et Eurojust démantèlent deux réseaux criminels liés à la fraude bancaire et aux cryptomonnaies, pour plus d’un milliard d’euros....
Researchers submitted 107 bug reports during the bugSWAT hacking event at the ESCAL8 conference in New Mexico.
The post Google Paid Out $458,000 at Live Hacking Event appeared first on SecurityWeek.
Marks & Spencer subit une chute historique de ses bénéfices après une cyberattaque attribuée à Scattered Spider, révélant la fragilité du retail britannique face aux cybermenaces....
Metropolitan Police lands lengthy sentence following 'complex' investigation The Metropolitan Police's seven-year investigation into a record-setting fraudster has ended after she was sentenced to 11 years and eight months in prison on Tuesday.…
Cinq chefs d’un réseau d’escroquerie birman condamnés à mort en Chine, symbole d’une répression transfrontalière sans précédent contre la cybercriminalité....
Microsoft has delivered a rather light load of patches for November 2025 Patch Tuesday: some 60+ vulnerabilities have received a fix, among them an actively exploited Windows Kernel flaw (CVE-2025-62215). CVE-2025-62215 CVE-2025-62215 is a memory corruption issue that stems from “concurrent executio...
Active Directory remains the authentication backbone for over 90% of Fortune 1000 companies. AD's importance has grown as companies adopt hybrid and cloud infrastructure, but so has its complexity. Every application, user, and device traces back to AD for authentication and authorization, making it...
Illuminate Education paie 5,1 millions $ après une violation de données massives ayant exposé les informations personnelles de millions d’élèves....
Discover how Exterro Imager Pro streamlines imaging, iOS collection, and live triage in one tool — register now for the November 19 webinar.
Various touch-ups added as MPs seek greater resilience to attacks on critical sectors UK government introduced the Cyber Security and Resilience (CSR) Bill to Parliament today, marking a significant overhaul of local cybersecurity legislation to sharpen the security posture of the most critical sect...
David Friedman, ex-ambassadeur de Trump, prend la tête du groupe NSO pour tenter de réhabiliter le créateur du logiciel espion Pegasus et renouer avec Washington....