> TODAY'S SUMMARY (157 articles)
Today's cybersecurity landscape highlights several critical threats and trends. A supply-chain attack involving AWS integrations has been uncovered, where attackers backdoored trusted connections to steal sensitive data from multiple customers. France has attributed significant cyberattacks on industrial refrigeration systems to Iranian state-sponsored hackers, resulting in operational disruptions and potential fire hazards. Additionally, a vulnerability in SonicWall's SSL VPN has been exploited, enabling attackers to bypass multi-factor authentication, raising concerns over corporate security. Meanwhile, hackers are actively exploiting the "SSHole" vulnerability in OpenSSH to breach Linux systems. Organizations are urged to strengthen their defenses amid these escalating threats, particularly as attacks targeting industrial controls and supply chains increase.
|
// AI-powered summary generated at 20:00
It's spooky season—but while jump scares may get your heart racing, catching up on digital rights news shouldn't! Our EFFector newsletter has got you covered with easy, bite-sized updates to keep you up-to-date.
In this issue, we spotlight new ALPR-enhanced police drones and how local communities ca...
Cisco Talos’ Vulnerability Discovery & Research team recently disclosed five vulnerabilities in Nvidia and one in Adobe Acrobat.The vulnerabilities mentioned in this blog post have been patched by their respective vendors, all in adherence to Cisco’s third-party vulnerability disclosure policy. ...
Federal employees play a key role in safeguarding the civil liberties of millions of Americans. Our rights to privacy and free expression can only survive when we stand together to push back against overreach and ensure that technology serves all people—not just the powerful.Â
That’s why EFF jumped...
The inbox zero method still works. Here's how to organize your inbox, simplify your workflow, and free up time for your most important tasks.
This is the eighth installment in a blog series documenting EFF's findings from the Stop Censoring Abortion campaign. You can read additional posts here.Â
In our Stop Censoring Abortion series, we’ve documented the many ways that reproductive rights advocates have faced arbitrary censorship on Meta...
ESET Endpoint Security for macOS version 9.0.5400.0 is available for download.
Hotfix for ESET Cyber Security version 9.0.5300.0 has been released and is available for download.
Broadcom has released security patches for critical flaws affecting several VMware products
A new campaign has been observed using malicious Windows shortcuts in credential-themed ZIP files to deploy PowerShell script
We're kicking off the month with a focus on the human element: the first line of defense, but also the path of least resistance for many cybercriminals
Security questions to ask your IT service providers when considering a digital transition
Bug bounty legend, NahamSec, has taken Burp AI for a spin. If you're curious how Burp AI fits into a real workflow, his new video is the perfect place to start. Watch on YouTube Burp AI was built to a
A new version of ESET PROTECT has been released and is available for download.
PwC found that AI security has become a top investment priority in cyber budgets over the next 12 months, ahead of cloud and network security
Researchers identified vulnerabilities in TOTOLINK X6000R routers: CVE-2025-52905, CVE-2025-52906 and CVE-2025-52907. We discuss root cause and impact.
The post TOTOLINK X6000R: Three New Vulnerabilities Uncovered appeared first on Unit 42.
Phantom Taurus is the latest formally identified cyber-espionage group aligned with Chinese state interest
The NCA warns that house buyers could face losses of over ÂŁ80,000 from a type of BEC called payment diversion fraud
I believe a good product needs clear and thorough documentation. I think shipping a quality product requires you to provide detailed and informative release notes. I try to live up to this in the curl project, and this is how we do it. Scripts are your friends Some of the scripts I use to maintain …...
Research by: hasherezade Highlights Introduction Rhadamanthys is a complex, multi-modular malware sold on the underground market since September 2022. It was first advertised by the actor “kingcrete2022.” From the outset, its design showed the hallmarks of experienced developers, and analysis soon r...
Image-sharing platform Imgur has blocked its services within the UK, following a regulatory notice from the ICO