> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
A critical Redis flaw, dubbed “RediShell,” has exposed 60,000 unprotected servers to exploitation
The Qilin ransomware gang has claimed attacks at Mecklenburg County Public Schools, stealing financial records and childrens’ medical files
Thieves steal IDs and payment info after data leaks from Discord support vendor Discord has confirmed customers’ data was stolen – but says the culprit wasn’t its own servers, just a compromised support vendor. The chat platform revealed late last week that an unnamed customer service vendor had be...
TechCrunch verified that the security bug in the Indian Income Tax Department's e-Filing portal exposed taxpayers' data to other users. The security researchers who found the flaw say the data leak is now fixed.
In episode 71 of The AI Fix, a giant robot spider goes backpacking for a year before starting its job in lunar construction, DoorDash builds a delivery Minion, and a TikToker punishes an AI by making it talk to condiments. GPT-5 crushes the humans at the ICPC World Finals, Claude Sonnet 4.5 codes fo...
The latest Hacker-Powered Security Report from HackerOne makes one thing clear: AI-assisted pentesting isn't a future trend; it's today's reality. In HackerOne's 2025 report, 70% of surveyed researche
New documents and court records obtained by EFF show that Texas deputies queried Flock Safety's surveillance data in an abortion investigation, contradicting the narrative promoted by the company and the Johnson County Sheriff that she was “being searched for as a missing person,” and that “it was a...
Today, Chainalysis is announcing that it has partnered with Hercules Capital, Inc. (NYSE: HTGC) for growth financing that will support…
The post Chainalysis Doubles Down on AI Innovation with Growth Financing from Hercules Capital appeared first on Chainalysis.
Discord said a third-party customer services provider was compromised to access user data, with the attackers aiming to extort a financial ransom
A simple yet effective tactic, known as hidden text salting, is increasingly used by cybercriminals over the past few months to evade even the most advanced email security solutions, including those powered by machine learning and large language models.
A critical Oracle E-Business Suite vulnerability is being actively exploited by the Clop ransomware group
Unlock and recover access to protected PDF files with ease using Passware Kit’s advanced decryption and password recovery features.
Space sensors and UAVs at sea top MoD's list in new wave of cutting-edge projects The UK is pressing ahead with cutting-edge defense projects, the latest including research to protect satellites from laser attack and a technology demonstrator for a jet-powered drone to operate from Royal Navy carrie...
Company leaders need to recognize the gravity of cyber risk, turn awareness into action, and put security front and center
Exploring a dangerous vulnerability in the Unity game engine, and how to protect your devices
A critical GoAnywhere vulnerability is being exploited by the Medusa ransomware group, says Microsoft
Department eyes new app to tap national ANPR data for live alerts, searches, and integrations The UK's Home Office is inviting tech suppliers to take part in a £60 million "market engagement" for an application that uses data from automated number plate recognition (ANPR) systems.…
With over a decade of experience, James Barnacle (Deputy Assistant Director, Federal Bureau of Investigation (FBI)) joins Jonathan Levin (CEO…
The post Inside the FBI: Crypto, Crime and National Security: Podcast Ep. 171 appeared first on Chainalysis.
How recycled passwords and poor security habits are fueling a cybercrime gold rush Partner Content If you're still using "password123" for more than one account, there's a good chance you've already exposed yourself to credential stuffing attacks — one of the most prevalent and damaging forms of au...
The following updates have been made to CVE-2025-59489: 1) In the Security Updates table, added Microsoft Mesh and Microsoft Mesh for Meta Quest as they affected by this vulnerability. 2) Further, to comprehensively address this vulnerability, Microsoft has released the 5.2514 build for these applic...