> TODAY'S SUMMARY (54 articles)
Today's cybersecurity landscape highlights several key threats and trends. Apple has introduced Secure Exclaves to enhance the protection of camera and microphone data while processing. Google released a second Chrome update this week to patch vulnerabilities that could enable code execution by attackers. Phishing attacks in Europe are surging at a rate significantly higher than the global average, increasing by 4.5 times year-over-year. Law enforcement agencies arrested 354 individuals in a major crackdown on dark web criminal activities, while operations targeting malicious infrastructures like Gootloader and CastleRAT have disrupted significant cybercrime networks. Additionally, critical vulnerabilities in systems like Check Point and Citrix have been exploited, emphasizing the ongoing risk of zero-day flaws. The recent worldwide outage of Microsoft 365 has raised alarms about potential exploitation by cybercriminals during this disruption.
|
// AI-powered summary generated at 12:00
Le Medizinische Versorgungszentrum Nordoberpfalz a subi une attaque informatique, ce qui a conduit à la fermeture temporaire de deux de ses sites à Tirschenreuth et Kemnath. Les cliniques ne sont pas affectées et le site de Weiden continue de fonctionner. Les systèmes ont été déconnectés en raison d...
La Prefeitura de Cuiabá a été victime d'une attaque cibernetique contre son système de gestion de données, mais l'équipe de technologie de l'information a pu contenir l'attaque rapidement. Les services de santé continuent de fonctionner normalement et la préfecture travaille à restaurer l'environnem...
DHS rule would expand biometric collection to immigrants and some citizens linked to them If you're filing an immigration form - or helping someone who is - the Feds may soon want to look in your eyes, swab your cheek, and scan your face. The US Department of Homeland Security wants to greatly expan...
Le 7 novembre, Habib Bank AG Zurich a dit avoir subi un accès non autorisé à son réseau d'entreprise, mais ses services bancaires restent opérationnels. L'équipe de la banque travaille avec des experts en cybersécurité pour évaluer et atténuer l'impact de l'incident. Les autorités réglementaires ont...
An unknown cyber actor accessed a portion of Columbia Medical Practice's computer network and installed a computer virus to lock files on computer systems, copying files that included names and Social Security numbers. The breach was discovered on November 5, 2025. A cyberattack was claimed by Qilin...
Can Understanding Non-Human Identities (NHIs) Really Help Relieve Cloud Compliance Stress? Navigating the complexities of cloud compliance can often feel overwhelming for organizations across various sectors. With the growing adoption of cloud services, ensuring compliant and secure environments has...
How Can Smart NHI Management Enhance Cybersecurity? Managing Non-Human Identities (NHIs) may seem like an abstract task, yet its significance in bolstering cybersecurity cannot be overstated. With the shift towards digital transformation, NHIs have become an integral part of many organizations’ netw...
Threat actors are actively exploiting a critical vulnerability in the Post SMTP plugin installed on more than 400,000 WordPress sites, to take complete control by hijacking administrator accounts. [...]
Are Your Machine Identities Truly Secure in the Cloud Ecosystem? With organizations strive to protect their digital assets, one critical yet sometimes overlooked area is the management of Non-Human Identities (NHIs) and Secrets Security Management. These machine identities, essential for securing an...
Overview Bumblebee malware has been an initial access tool used by threat actors since late 2021. In 2023 the malware was first reported as using SEO poisoning as a delivery mechanism. Recently in May of 2025 Cyjax reported on a campaign using this method again, impersonating various IT tools. We ob...
OpenStack Keystone could allow unintended access to network services.
The Apache Software Foundation disputes claims that its OpenOffice project suffered an Akira ransomware attack, after the threat actors claimed to have stolen 23 GB of corporate documents. [...]
The Treasury Department on Tuesday sanctioned eight people and two companies it accused of laundering money obtained from cybercrime and IT worker schemes to fund North Korean government objectives. According to the department, over the last three years North Korea-linked cybercriminals have stolen...
The tech giant didn’t report active exploitation of any of the patched defects, yet details about potential impacts remain limited.
The post Apple addresses more than 100 vulnerabilities in security updates for iPhones, Macs and iPads appeared first on CyberScoop.
Hundreds of malicious Android apps on Google Play were downloaded more than 40 million times between June 2024 and May 2025, notes a report from cloud security company Zscaler. [...]
As enterprise AI rapidly matures, we’re entering a new phase, one powered by agentic AI. These intelligent agents are more autonomous, capable of making decisions, taking actions, and adapting dynamically to new environments. This evolution introduces new complexity in how we build AI systems as we...
SESSION
Session 2A: LLM Security
Authors, Creators & Presenters: Tian Dong (Shanghai Jiao Tong University), Minhui Xue (CSIRO's Data61), Guoxing Chen (Shanghai Jiao Tong University), Rayne Holland (CSIRO's Data61), Yan Meng (Shanghai Jiao Tong University), Shaofeng Li (Southeast University), Zhe...
A buffer overflow was discovered in GIMP, the GNU Image Manipulation Program, which could result in denial of service or potentially the execution of arbitrary code if malformed XWD images are opened.
As several high-profile companies responded to cyberattacks, Polish Digital Affairs Minister Krzysztof Gawkowski said incidents involving Poland’s public and private infrastructure are becoming “commonplace.”
Kay discovered that OpenStack Keystone incorrectly handled the ec2tokens
and s3tokens APIs. A remote attacker could possibly use this issue to
obtain unauthorized access and escalate privileges.