> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
Radio Nordseewelle a été victime d'une attaque de piratage informatique qui a endommagé une grande partie de son infrastructure technique, mais le service a pu être rétabli grâce à l'engagement de l'équipe et à l'aide de partenaires régionaux. Les enquêtes techniques ont révélé qu'il s'agissait d'un...
La Devereux Foundation a détecté une activité suspecte dans ses systèmes électroniques le 9 novembre 2025, ce qui pourrait avoir un impact sur la confidentialité des informations relatives à certaines personnes, notamment des employés, des clients, des donateurs, des payeurs et des partenaires comme...
OpenAI is preparing the GPT-5.1 family for public rollout. This includes GPT-5.1 (base), GPT-5.1 Reasoning, and GPT-5.1 Pro for those who pay a $200 monthly subscription. [...]
Are Organizations Maximizing the Potential of Non-Human Identities? The importance of managing Non-Human Identities (NHIs) cannot be overstated. But how effectively are organizations leveraging these capabilities to enhance stable cybersecurity? NHIs—often referred to as machine identities—are pivot...
Are Your Non-Human Identities Truly Secure? When we delve deeper where cloud environments dominate, the concept of Non-Human Identities (NHIs) is increasingly coming to the forefront of cybersecurity discussions. But what exactly are NHIs, and why is their management crucial for robust security meas...
A China-linked group targeted a U.S. non-profit to gain long-term access, part of wider attacks on U.S. entities tied to policy matters. China-linked hackers breached a U.S. policy-focused nonprofit in April 2025, maintaining weeks of access. They used DLL sideloading via vetysafe.exe, a tactic used...
How Are Non-Human Identities Reshaping Cybersecurity Solutions? How often have you considered the role of machine identities? With more enterprises migrate their operations to the cloud, the management of Non-Human Identities (NHIs) has become paramount. These machine identities, which include every...
How Do Non-Human Identities (NHIs) Transform Cloud Security? Can your organization afford to overlook the security of Non-Human Identities? Machine identities have become as crucial as human identities, bringing unique challenges and opportunities for cybersecurity experts around the globe. The mana...
An Italian political adviser was targeted with Paragon’s Graphite spyware, becoming the fifth Italian in the ongoing government surveillance activity. Italian political adviser Francesco Nicodemo said he was targeted with Paragon’s Graphite spyware, becoming the fifth Italian in the ongoing governme...
The days of human analysts manually sorting through endless security alerts are numbered. By 2028, artificial intelligence (AI) agents will handle 80% of that work in most security operations centers worldwide, according to a new IDC report. But while AI promises to revolutionize defense, it’s also...
This week, three very different data breaches proved one thing: no sector is safe. From nation-state espionage to data theft to social engineering, the tactics vary — but the results are the same: exposed data, shaken trust, and hard lessons. Here’s what happened: 🔒 SonicWall — A nation-state actor...
The GlassWorm malware campaign, which impacted the OpenVSX and Visual Studio Code marketplaces last month, has returned with three new VSCode extensions that have already been downloaded over 10,000 times. [...]
AI agents are increasingly being used to search the web, making traditional bot mitigation systems inadequate and opening the door for malicious actors to develop and deploy bots that impersonate legitimate agents from AI vendors to launch account takeover and financial fraud attacks.
The post Radw...
SESSION
Session 2C: Phishing & Fraud 1
Authors, Creators & Presenters: Jens Christian Opdenbusch (Ruhr University Bochum), Jonas Hielscher (Ruhr University Bochum), M. Angela Sasse (Ruhr University Bochum, University College London)
PAPER
"Where Are We On Cyber?" - A Qualitative Study On Bo...
With the first Patch Tuesday following Windows 10's end of support approaching next week, users who continue to run the operating system should enroll in the Extended Security Updates (ESU) program to remain protected against newly discovered security vulnerabilities. [...]
Microsoft has disclosed details of a novel side-channel attack targeting remote language models that could enable a passive adversary with capabilities to observe network traffic to glean details about model conversation topics despite encryption protections under certain circumstances.
This leakage...
Esra'a Al Shafei spoke with The Reg about the spy tech 'global trade' interview Digital rights activist Esra'a Al Shafei found FinFisher spyware on her device more than a decade ago. Now she's made it her mission to surveil the companies providing surveillanceware, their customers, and their funder...
In the race to build and release software faster, many organizations unintentionally overlook one critical aspect: security and process integrity within the Software Development Life Cycle (SDLC). Every missed control or overlooked best practice in the SDLC can lead to significant risks from vulnera...
In late October 2025, data breached from the Hungarian political party TISZA was published online before being extensively redistributed. Stemming from a compromise of the TISZA Világ service earlier in the month, the breach exposed 200k records of personal data including email addresses along with...
Des centaines d’applications Android malveillantes ont été téléchargées plus de 40 millions de fois sur Google Play entre juin 2024 et mai 2025, alerte ZScaler.
The post 239 applications Android malveillantes cumulent plus de 40 millions de téléchargements ! first appeared on IT-Connect.