> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
Clackamas Community College experienced a data breach where an unauthorized third party accessed a small number of systems and acquired files containing personal information. The breach occurred on October 24, 2025, and the college has taken steps to address the incident and prevent future occurrenc...
WIRED recently demonstrated how to cheat at poker by hacking the Deckmate 2 card shufflers used in casinos. The mob was allegedly using the same trick to fleece victims for millions.
Day Two of Pwn2Own Ireland 2025 saw $792K for 56 0-days, led by The Summoning Team after a major Samsung Galaxy exploit. Day Two of Pwn2Own Ireland 2025 ends with participants earning $792,750 for 56 zero-days. Meta, Synology and QNAP are sponsoring the event. Pwn2Own Ireland 2025 includes eight cat...
In a significant development in one of the year’s largest fintech breaches, new reports released today confirm that Prosper Marketplace, the San Francisco–based peer-to-peer lending platform, suffered a data compromise affecting roughly 17.6 million people. The updated figure, first published by Tec...
Key Takeaways Strong governance depends on current, coherent, and well-implemented policies. They define how decisions are made, risks are managed, and accountability is enforced. Yet, policy management remains one of the least mature governance functions. Modern governance calls for a continuous, s...
New openssl packages are available for Slackware 15.0 to fix a security issue.
The post What is an Autonomous SOC? The Future of Security Operations Centers appeared first on AI Security Automation.
The post What is an Autonomous SOC? The Future of Security Operations Centers appeared first on Security Boulevard.
Toys "R" Us Canada has sent notices of a data breach to customers informing them of a security incident where threat actors leaked customer records they had previously stolen from its systems. [...]
PALO ALTO, Calif., Oct. Â 23, 2025, CyberNewswire: SquareX released critical research exposing a new class of attack targeting AI browsers.
The AI Sidebar Spoofing attack leverages malicious browser extensions to impersonate trusted AI sidebar interfaces, which is used to trick … (more…)
The post N...
What?! No complimentary credit monitoring? The Canadian outpost of retailer Toys R Us on Thursday notified customers that attackers accessed a database, stole some of their personal information, then posted the data online.…
The attacks, which involved fake job offers as a social engineering lure, were likely aimed at stealing proprietary information about drone manufacturing, ESET said in a report.
The post North Korea’s Lazarus group attacked three companies involved in drone development appeared first on CyberScoop.
HP has pulled an HP OneAgent software update for Windows 11 that mistakenly deleted Microsoft certificates required for some organizations to log in to Microsoft Entra ID, effectively disconnecting them from their company's cloud environments. [...]
Are Your Cybersecurity Investments Justified? Where organizations increasingly shift to cloud computing, the debate over justified spending on cybersecurity has never been more pertinent. With the rise of Non-Human Identities (NHIs) and Secrets Security Management, many companies are re-evaluating h...
How Can Organizations Fortify Their Cybersecurity with Non-Human Identities? Where automation is ubiquitous, how can organizations ensure their systems remain secure against sophisticated threats? The answer lies in managing Non-Human Identities (NHIs) effectively. While digital ecosystems expand, t...
Go Cryptography could allow unintended access to network services.
Security Information and Event Management (SIEM) has long been the backbone of enterprise security operations—centralizing log collection, enabling investigation, and supporting compliance. But traditional SIEM deployments are often expensive, noisy, and slow to deliver value. They rely heavily on m...
Learn how AI agents are redefining online fraud in 2025. Explore the 6 key takeaways from the Loyalty Security Alliance’s “Rise of AI Fraud” webinar.
The post 6 Takeaways from “The Rise of AI Fraud” Webinar: How AI Agents Are Rewriting Fraud Defense in 2025 appeared first on Security Boulevard.
On September 25th, 2024, and on October 3rd, 2024, we received submissions through our Bug Bounty Program for Arbitrary Plugin Installation vulnerabilities in the GutenKit and Hunk Companion WordPress plugins, which have over 40,000 and 8,000 active installations, respectively.
The post Mass Exploit...
Mic-E-Mouse: a theoretical attack that could allow eavesdropping on conversations in a room through a computer mouse's optical sensor.
A security issue was discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), this problem has been fixed in version 141.0.7390.122-1~deb12u1.