> TODAY'S SUMMARY (54 articles)
Today's cybersecurity landscape highlights several key threats and trends. Apple has introduced Secure Exclaves to enhance the protection of camera and microphone data while processing. Google released a second Chrome update this week to patch vulnerabilities that could enable code execution by attackers. Phishing attacks in Europe are surging at a rate significantly higher than the global average, increasing by 4.5 times year-over-year. Law enforcement agencies arrested 354 individuals in a major crackdown on dark web criminal activities, while operations targeting malicious infrastructures like Gootloader and CastleRAT have disrupted significant cybercrime networks. Additionally, critical vulnerabilities in systems like Check Point and Citrix have been exploited, emphasizing the ongoing risk of zero-day flaws. The recent worldwide outage of Microsoft 365 has raised alarms about potential exploitation by cybercriminals during this disruption.
|
// AI-powered summary generated at 12:00
An FCC ruling issued days before Donald Trump took office was an "ineffective response" to the Salt Typhoon intrusions into U.S. telecom networks, the agency's new leadership said in announcing plans to rescind it.
Oleksii Lytvynenko, 43, was arrested in Ireland in 2023 and extradited to the U.S. earlier this month. He pleaded not guilty in federal court Thursday.
The post Ukrainian allegedly involved in Conti ransomware attacks faces up to 25 years in jail appeared first on CyberScoop.
Following the Money is a Q&A series that spotlights how Chainalysis customers use our products in the real world —…
The post Following the Money with Chainalysis: 7 Questions for Oscar Camblain appeared first on Chainalysis.
The University of Pennsylvania suffered a cybersecurity incident on Friday, where students and alumni received a series of offensive emails from various University email addresses, claiming that data was stolen in a breach. [...]
CISA warns ransomware gangs exploit CVE-2024-1086, a Linux kernel flaw in netfilter: nf_tables, introduced in 2014 and patched in Jan 2024. CISA warned that ransomware gangs are exploiting CVE-2024-1086, a high-severity Linux kernel flaw introduced in 2014 and patched in January 2024. CISA didn’t pr...
Several security issues were fixed in the Linux kernel.
In a report shared with Recorded Future News, Unit 42 attributed the targeting of Cisco ASA devices to Storm-1849 — a China-based threat group that Cisco previously said has been attacking the tools since 2024.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- ARM64 architecture;
- PowerPC architecture;
- x86 architecture;
- ACPI drivers;
- Ublk userspace block drive...
The hackers sent out mass-emails using official University of Pennsylvania email accounts, and threatened to leak university data.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
OpenAI has announced the launch of an "agentic security researcher" that's powered by its GPT-5 large language model (LLM) and is programmed to emulate a human expert capable of scanning, understanding, and patching code.
Called Aardvark, the artificial intelligence (AI) company said the autonomous...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Microsoft is introducing a new scareware sensor for the Microsoft Edge web browser, which helps detect scam pages more quickly and ensures that Defender SmartScreen blocks them faster. [...]
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
via the comic artistry and dry wit of Randall Munroe, creator of XKCD
Permalink
The post Randall Munroe’s XKCD ‘Hot Water Balloon” appeared first on Security Boulevard.
Explorez le Toolkit des bonnes pratiques de cybersécurité de Sophos et commencez dès aujourd'hui à élaborer votre stratégie de type 'prevention-first'.
Ribbon, which provides software and technology to phone and internet giants, said nation-state hackers were in its systems since at least December 2024.