> TODAY'S SUMMARY (54 articles)
Today's cybersecurity landscape highlights several key threats and trends. Apple has introduced Secure Exclaves to enhance the protection of camera and microphone data while processing. Google released a second Chrome update this week to patch vulnerabilities that could enable code execution by attackers. Phishing attacks in Europe are surging at a rate significantly higher than the global average, increasing by 4.5 times year-over-year. Law enforcement agencies arrested 354 individuals in a major crackdown on dark web criminal activities, while operations targeting malicious infrastructures like Gootloader and CastleRAT have disrupted significant cybercrime networks. Additionally, critical vulnerabilities in systems like Check Point and Citrix have been exploited, emphasizing the ongoing risk of zero-day flaws. The recent worldwide outage of Microsoft 365 has raised alarms about potential exploitation by cybercriminals during this disruption.
|
// AI-powered summary generated at 12:00
I was intrigued when Johannes talked about malware that uses BASE64 over DNS to communicate. Take a DNS request like this: label1.label2.tld. Labels in a request like this can only be composed with letters (not case-sensitive), digits and a hyphen character (-). While BASE64 is encoded with letters...
Presently sponsored by: Report URI: Guarding you from rogue JavaScript! Don’t get pwned; get real-time alerts & prevent breaches #SecureYourSiteTracking down bugs in software is a pain that all of us who write code must bear. When we're talking about outright errors in a web page, you typically...
SICW 2025 : L’ANSSI fer de lance de la coopération franco-singapourienne en matière de cyber
anssiadm
lun 27/10/2025 - 09:04
Alors que la France célèbre cette année les 60 ans de ses relations diplomatiques avec Singapour, l’ANSSI a une nouvelle fois participé à la S...
ChatGPT, Gemini, DeepSeek, and Grok are serving users propaganda from Russian-backed media when asked about the invasion of Ukraine, new research finds.
The ransomware group known as Qilin (aka Agenda, Gold Feather, and Water Galura) has claimed more than 40 victims every month since the start of 2025, barring January, with the number of postings on its data leak site touching a high of 100 cases in June.
The development comes as the ransomware-as-a...
Hackers exploited old RCE flaws in WordPress GutenKit and Hunk Companion plugins. Wordfence firm blocked 8.7M attacks in two days. In September and October 2024, submissions revealed Arbitrary Plugin Installation vulnerabilities in GutenKit and Hunk Companion WordPress plugins, with 40,000 and 8,000...
Une nouvelle technique de phishing nommée CoPhish exploite les agents Microsoft Copilot Studio pour dérober des jetons d’authentification OAuth.
The post L’ingénierie sociale s’invite dans Microsoft Copilot Studio avec l’attaque CoPhish first appeared on IT-Connect.
Face aux ransomwares, la sauvegarde immuable change la donne en rendant les données de restauration intouchables : aucune suppression, aucun chiffrement, etc.
The post Sauvegarde immuable résistante aux ransomwares : comment elle change la donne first appeared on IT-Connect.
The newly released OpenAI Atlas web browser has been found to be susceptible to a prompt injection attack where its omnibox can be jailbroken by disguising a malicious prompt as a seemingly harmless URL to visit.
"The omnibox (combined address/search bar) interprets input either as a URL to navigate...
A list of topics we covered in the week of October 20 to October 26 of 2025
Biometric authentication has moved from fingerprints to voices to facial scans, but a team of researchers believes the next step could be inside the ear. New research explores how the ear canal’s unique acoustic properties can be used to verify identity through wireless earbuds. Their system, called...
The CISO job is tough, and it’s getting tougher: 66% of security leaders surveyed for the 2025 State of Cybersecurity report from professional association ISACA said their roles are more stressful today than they were five years ago — in the midst of a pandemic.
Dig into al...
Learn how proxy servers enhance authentication security by filtering traffic, supporting MFA, enabling Zero Trust, and protecting against cyber threats.
The post How Proxy Servers Enhance Security in Modern Authentication Systems appeared first on Security Boulevard.
Discover the top IT asset management companies of 2025. Compare Alloy, ServiceNow, Ivanti, Freshworks, and SysAid to find the best ITAM solution for your business.
The post Top IT Asset Management Companies appeared first on Security Boulevard.
Microsoft a publié une nouvelle mise à jour hors bande à destination de Windows Server pour patcher une faille critique découverte dans WSUS : CVE-2025-59287.
The post Patchez WSUS – CVE-2025-59287 : cette nouvelle faille critique est déjà exploitée ! first appeared on IT-Connect.
Software is a patchwork of third-party components, and keeping tabs on what’s running under the hood has become a challenge. The open-source platform Dependency-Track tackles that problem head-on. Rather than treating software composition as a one-time scan, it continuously monitors every version of...
When the pandemic kept people at home in 2020, millions turned to games for an escape. The surge turned every console, PC, and phone into part of a vast online network. More players meant more logins, payments, and personal data. That created a target larger than the industry had ever faced. A growi...
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Krita. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 7.8. The following CVEs a...
The industry is entering a phase where code is being deployed faster than it can be secured, according to OX Security. Findings from the Army of Juniors: The AI Code Security Crisis report show that AI-generated code often appears clean and functional but hides structural flaws that can grow into sy...
Want to see if a remote server is still alive, or trace the path your data takes across the internet? Network Utility had you covered, until Apple removed it. Network Utility was the go-to macOS app for quick network checks. It gave you a graphical way to run tools like Ping, Traceroute, and Port Sc...