> TODAY'S SUMMARY (21 articles)
Today's cyber news highlights several significant threats and trends. Microsoft 365 is experiencing a widespread outage affecting services like Outlook and Teams, causing operational disruptions. In vulnerability news, the PHP2Shell exploit was leveraged in attacks against Check Point Gateways, while a new zero-day vulnerability in N-central named 4EverAble2Shell was exploited shortly after its proof of concept was published. Additionally, North Korean hackers have reportedly stole over $400 million in cryptocurrency through sophisticated social engineering tactics involving fake video calls. The FBI has seized $1.2 billion in cryptocurrency linked to these North Korean operations. On the patching front, Ubuntu has released updates to address various vulnerabilities, including server impersonation and server-side request forgery.
|
// AI-powered summary generated at 08:00
Cisco patched a critical flaw in its Unified Contact Center Express (UCCX) software that allowed attackers to execute commands with root privileges. Cisco released security updates to address a critical vulnerability, tracked as CVE-2025-20354 (CVSS score 9.8), in the Unified Contact Center Express...
In a suspected test effort, unknown actors have successfully embedded a strain of ransomware-style behavior, dubbed Ransomvibe, into extensions listed for Visual Studio Code.
According to Secure Annex findings, the malicious code published to the VSCode extension marketplac...
Attackers have taken the ClickFix technique further, with pages borrowing tricks from online sellers to pressure victims into performing the steps that will lead to a malware infection. Push Security has spotted one of these pages, showing an embedded tutorial video on how to perform the asked-for a...
As businesses grapple with the security challenges of protecting their data in the cloud, several security strategies have emerged to safeguard digital assets and ensure compliance. One such security strategy is called zero-trust security. Zero-trust architecture fosters the ânever trust, always ve...
Googleâs acquisition of Wiz is expected to close in 2026, but there are other reviews that need to be cleared.
The post DOJ Antitrust Review Clears Googleâs $32 Billion Acquisition of Wiz appeared first on SecurityWeek.
A newly identified Android spyware targeted Galaxy devices for close to a year, including users in the Middle East, researchers exclusively tell TechCrunch.
The Congressional Budget Office confirmed it had been hacked, potentially disclosing important government data to malicious actors.
The post The Congressional Budget Office Was Hacked. It Says It Has Implemented New Security Measures appeared first on SecurityWeek.
Commercial-grade LANDFALL spyware exploits CVE-2025-21042 in Samsung Androidâs image processing library. The spyware was embedded in malicious DNG files.
The post LANDFALL: New Commercial-Grade Android Spyware in Exploit Chain Targeting Samsung Devices appeared first on Unit 42.
Despite 83,000 public cameras, crime in Mexico City remains highâand widespread surveillance raises myriad ethical issues.
As someone who has spent over six years in the trenches of IT operations at Amazon, managing critical infrastructure that cannot afford downtime, Iâve witnessed firsthand how the convergence of cyberthreats and business continuity has fundamentally changed the game for executi...
Smart buildings face rising IoT cyber threats. Learn how simulations, AI, and red or purple teaming can strengthen defenses and improve incident response.
The post Simulating Cyberattacks to Strengthen Defenses for Smart Buildings appeared first on Security Boulevard.
The system could be made to expose sensitive information.
The system could be made to expose sensitive information.
Jean-Claude Graf, Sandro RĂŒegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
An out-of-bounds write flaw in WebGPU tracked as CVE-2025-12725 could be exploited for remote code execution.
The post Chrome 142 Update Patches High-Severity Flaws appeared first on SecurityWeek.
Jean-Claude Graf, Sandro RĂŒegge, Ali Hajiabadi, and Kaveh Razavi discovered
that the Linux kernel contained insufficient branch predictor isolation
between a guest and a userspace hypervisor for certain processors. This
flaw is known as VMSCAPE. An attacker in a guest VM could possibly use this
to e...
Imagine this: Sarah from accounting gets what looks like a routine password reset email from your organizationâs cloud provider. She clicks the link, types in her credentials, and goes back to her spreadsheet. But unknown to her, sheâs just made a big mistake. Sarah just accidentally handed over her...
En octobre, le Clusif sâest mobilisĂ© sur plusieurs fronts : Cybermois, Assises de la cybersĂ©curitĂ©, portes ouvertes et confĂ©rence thĂ©matique. Un mois marquĂ© par la diversitĂ© des actions et la vitalitĂ© des Ă©changes au sein de la communautĂ©. Le Mois europĂ©en de la cybersĂ©curitĂ©, coordonnĂ© en France pa...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network: