[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 00:00

> ESET Cloud Office Security v645 has been released
ESET Cloud Office Security v645 (Feature release) has been released.
> Russian Government Now Actively Managing Cybercrime Groups: Security Firm
The relationship between the Russian government and cybercriminal groups has evolved from passive tolerance. The post Russian Government Now Actively Managing Cybercrime Groups: Security Firm appeared first on SecurityWeek.
> Researchers expose large-scale YouTube malware distribution network
Check Point researchers have uncovered, mapped and helped set back a stealthy, large-scale malware distribution operation on YouTube they dubbed the “YouTube Ghost Network.” The network published more than 3,000 videos across compromised or fake channels, luring viewers with game cheats, cracked sof...
> Zero Trust Has a Blind Spot—Your AI Agents
AI agents now act, decide, and access systems on their own — creating new blind spots Zero Trust can't see. Token Security helps organizations govern AI identities so every agent's access, intent, and action are verified and accountable. [...]
> Spoofed AI sidebars can trick Atlas, Comet users into dangerous actions
OpenAI's Atlas and Perplexity's Comet browsers are vulnerable to AI sidebar spoofing attacks that mislead users into following fake AI-generated instructions. [...]
> Google nukes 3,000 YouTube videos that sowed malware disguised as cracked software
Check Point helps exorcise vast 'Ghost Network' that used fake tutorials to push infostealers Google has taken down thousands of YouTube videos that were quietly spreading password-stealing malware disguised as cracked software and game cheats.…
> Help Wanted: Vietnamese Actors Using Fake Job Posting Campaigns to Deliver Malware and Steal Credentials
Google Threat Intelligence Group (GTIG) is tracking a cluster of financially motivated threat actors operating from Vietnam that leverages fake job postings on legitimate platforms to target individuals in the digital advertising and marketing sectors. The actor effectively uses social engineering t...
> Former Polish official indicted over spyware purchase
Michał Woś faces a possible 10-year prison sentence for facilitating a spyware purchase, which prosecutors say took place in 2017.
> Escaping Secrets Hell: How Workload Identity Scales Where Secrets Can’t
Organizations rushing to deploy AI agents and scale cloud native infrastructures are hitting an unexpected bottleneck: the complexity of securing machine-to-machine communications. Just 18 months ago, there were 45 machine identities for each human identity, but today that’s nearly doubled to 82-to...
> Lazarus Group’s Operation DreamJob Targets European Defense Firms
Cyber-attacks by North Korea’s Lazarus Group target European defense firms in drone development
> Wireshark 4.6.0 brings major updates for packet analysis and decryption
If you’ve ever used Wireshark to dig into network traffic you know how vital even small upgrades can be. With version 4.6.0 the team behind the open-source network protocol analyzer has added a number of features that could change how you analyse traffic, decode protocols and handle captures across...
> Sonya Ryan Discusses Online Safety And Child Protection On MSAB Podcast
Sonya Ryan joins the MSAB Podcast to discuss her daughter Carly’s legacy, the fight for online safety, and the ongoing push for stronger protections for young people.
> Lanscope Endpoint Manager vulnerability exploited in zero-day attacks (CVE-2025-61932)
CVE-2025-61932, an “improper verification of source of a communication channel” vulnerability affecting Lanscope Endpoint Manager, has been exploited as a zero-day since April 2025, the Japan Computer Emergency Response Team Coordination Center (JPCERT/CC) warned on Wednesday. According to informati...
> Phishing campaign across Mideast, North Africa is attributed to Iranian group
The well-known Iranian cyber-espionage operation tracked as MuddyWater spread backdoor malware in recent months through a compromised email account, researchers said.
> AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk
SquareX has shown how malicious browser extensions can impersonate AI sidebar interfaces. The post AI Sidebar Spoofing Puts ChatGPT Atlas, Perplexity Comet and Other Browsers at Risk appeared first on SecurityWeek.
> Oracle Linux 10: ELSA-2025-18320 Thunderbird Important Security Patch
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 10 Kernel Moderate Threat ELSA-2025-18318 CVE-2025-38351
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
> Dissecting YouTube’s Malware Distribution Network
Research by: Antonis Terefos (@Tera0017) Key Points Introduction In recent years, threat actors have continuously adapted their tactics to discover new and effective methods for malware distribution. While email remains one of the most prominent infection vectors, its effectiveness has diminished du...
> Oracle Linux 9 ELSA-2025-18321 Thunderbird Important Security Fix
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 7 ELSA-2025-17161 Kernel Moderate Threat Fixes
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network: