> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
Use after free in Microsoft Office allows an unauthorized attacker to execute code locally.
Untrusted pointer dereference in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
How the NCSC’s ‘Cyber Action Toolkit’ is helping small businesses to improve their cyber security.
Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over a network.
Concurrent execution using shared resource with improper synchronization ('race condition') in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.
What is ChatGPT? ChatGPT is a conversational AI that has been created by OpenAI and is based on the ability to understand and generate text that is in many ways similar to how a human being would write it, given an input. It belongs to a line of models called the Generative Pre-trained Transformer o...
Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.
Double free in Microsoft Wireless Provisioning System allows an authorized attacker to elevate privileges locally.
Hackers exploited Triofox flaw CVE-2025-12480 to bypass auth and install remote access tools via the platform’s antivirus feature. Google’s Mandiant researchers spotted threat actors exploiting a now-patched Triofox flaw, tracked as CVE-2025-12480 (CVSS score of 9.1) that allows them to bypass authe...
Heap-based buffer overflow in Windows Subsystem for Linux GUI allows an unauthorized attacker to execute code over a network.
Heap-based buffer overflow in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to execute code over a network.
In this Help Net Security interview, Chris Wheeler, CISO at Resilience, talks about how CISOs are managing changing cybersecurity budgets. While overall spending is up, many say the increases don’t match their most pressing needs. Wheeler explains how organizations are reallocating funds, measuring...
Exposure of sensitive information to an unauthorized actor in Microsoft Office Excel allows an unauthorized attacker to disclose information locally.
Improper access control in Microsoft Configuration Manager allows an authorized attacker to elevate privileges locally.
Enterprise CISOs have been trying to move beyond passwords for more than a decade, but have run into technical roadblocks, as many legacy systems were never designed for anything other thanpasswords.
As a result, the passwordless revolution, despite its promise and the enti...
Improper privilege management in Microsoft Streaming Service allows an authorized attacker to elevate privileges locally.
Use after free in Windows Broadcast DVR User Service allows an authorized attacker to elevate privileges locally.
Police use drones, body cameras, and license plate readers as part of their daily work. Supporters say these tools make communities safer. Critics see something different, a system that collects too much data and opens the door to abuse. When surveillance expands without public oversight, civil libe...
Untrusted pointer dereference in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to elevate privileges locally.
Heap-based buffer overflow in Windows OLE allows an unauthorized attacker to execute code locally.