> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
In her latest video, CyberMaddy dives into the world of AI-driven ethical hacking, exploring how Burp AI performs in Repeater when tasked with finding web vulnerabilities like SQL injection, cross-sit
We found a path traversal vulnerability in Smithery.ai that compromised over 3,000 MCP servers and exposed thousands of API keys. Here's how a single Docker build bug nearly triggered one of the largest AI supply chain attacks to date.
The post From Path Traversal to Supply Chain Compromise: Breakin...
A spearphishing campaign earlier in October disappeared within a day, according to cybersecurity researchers, but it was aimed at a wide variety of targets associated with the war in Ukraine.
Think you know all there is to know about cybersecurity? Guess again. Shadow AI is challenging security leaders with many of the same issues raised by other “shadow” technologies. Only this time, it’s evolving at breakneck speed.
Key takeaways:
The vast majority of organizations (89%) are either u...
What happens when you set Burp AI loose on a deliberately vulnerable web app? In his latest video, Tib3rius takes Burp’s new agentic Burp AI capabilities for a spin - and the results are seriously coo
We’re excited to share that Hexagate by Chainalysis now supports the Plasma ecosystem, bringing real-time smart contract security solutions to…
The post Hexagate by Chainalysis Now Supports Plasma with Real-time Smart Contract Security Detection appeared first on Chainalysis.
Threat actors with ties to China exploited the ToolShell security vulnerability in Microsoft SharePoint to breach a telecommunications company in the Middle East after it was publicly disclosed and patched in July 2025.
Also targeted were government departments in an African country, as well as gove...
Ivanti announced product enhancements across its solution pillars, empowering our customers to accelerate cloud adoption, strengthen security posture and streamline IT operations. Distributed workforce requires seamless and secure access to the applications, endpoints and data essential to every rol...
The nonprofit Cyber Monitoring Centre says the cyberattack on Jaguar Land Rover is “the most economically damaging cyber event” to ever impact the United Kingdom.
The company’s IAM platform identifies AI agents, supports assigning permission to them, and tracks all activity.
The post Keycard Emerges From Stealth Mode With $38 Million in Funding appeared first on SecurityWeek.
Attackers are increasingly abusing internal OAuth-based applications to gain persistent access to cloud environments, Proofpoint researchers warn. These apps often remain unnoticed for quite some time and allow attackers to maintain access to high-privileged accounts even after passwords are reset o...
Scammers have begun impersonating outreach from Google’s “Careers” division to trick targets into giving away their credentials.
According to a Sublime Security finding, the attackers are sending messages that appear to come from Google’s recruiting team — asking “Are you o...
Rubrik announced the launch of the Rubrik Agent Cloud to accelerate enterprise AI agent adoption while managing risk of AI deployments. AI transformation is now mandatory for most organizations. However, IT leaders are constrained because agentic AI has significant risks including hallucination as w...
Cyberattacks on UK retailers show rising supply chain risks. Learn how zero-trust, vendor vetting, and continuous monitoring strengthen cyber resilience.
The post Retail Cyberattacks Reveal Hidden Weaknesses In Supply Chain Security appeared first on Security Boulevard.
Russian state-backed hackers are using fake “I am not a robot” CAPTCHA pages to deliver new strains of espionage malware, according to Google Cloud’s Threat Intelligence Group (GTIG), marking a fresh evolution in tactics by the ColdRiver group that has long targeted Western go...
Star Blizzard started using the NoRobot (BaitSwitch) and MaybeRobot (SimpleFix) malware after public reporting on the LostKeys malware.
The post Russian APT Switches to New Backdoor After Malware Exposed by Researchers appeared first on SecurityWeek.
The bug, tracked as CVE-2025-54957, could let attackers run code via audio files.
From Detection to Resolution: Why the Gap Persists
A critical vulnerability is identified in an exposed cloud asset. Within hours, five different tools alert you about it: your vulnerability scanner, XDR, CSPM, SIEM, and CMDB each surface the issue in their own way, with different severity levels, m...
The Cyber Monitoring Centre has classified the cyber-attack against Jaguar Land Rover as a “systemic cyber event”
Cybersecurity researchers have uncovered a new supply chain attack targeting the NuGet package manager with malicious typosquats of Nethereum, a popular Ethereum .NET integration platform, to steal victims' cryptocurrency wallet keys.
The package, Netherеum.All, has been found to harbor functionalit...