> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
Boo! A Home Depot Halloween “giveaway” isn’t a treat—it’s a phishing trick. Fake links, tracking pixels, and compromised sites are the real prizes here.
As artificial intelligence (AI) solutions continue to evolve, the rise of agentic AI—intelligent systems that can act autonomously on behalf of an organization—presents new security challenges. Research from Delinea’s 2025 AI in Identity Security Demands a New Playbook report reveals that 66% of org...
Technology may be changing rapidly but one thing remains constant: It’s not an easy time to be a CSO. The role continues to evolve with security leaders taking on even more responsibilities, and 76% reporting that understanding which security solutions best fit their company h...
The gRPC framework, and by extension gRPC-Web, is based on a binary data serialization format. This poses a challenge for penetration testers when intercepting browser to server communication with tools such as Burp Suite.
This project was initially started after we unexpectedly encountered gRPC-We...
Europol et la police lettone démantèlent un réseau de revente de numéros SIM impliqué dans 3 000 fraudes et 49 millions de comptes....
The Royal Swedish Academy of Sciences (IVA, the same org that selects winners for three of the Nobel prize categories) awards me a gold medal 2025 for my work on curl. (English version of IVA article) This academy, established 1919 by the Swedish king Gustav V, has been awarding great achievers for...
La FSB veut devenir l’unique autorité russe régulant les technologies d’espionnage privé et de cybersurveillance....
In this Help Net Security interview, Ken Deitz, CISO at Brown & Brown, discusses how the definition of cyber risk has expanded beyond IT to include IoT, OT, and broader supply chain ecosystems. As organizations connect these assets through cloud and networked systems, the attack surface and depe...
Alan warns that the F5 breach — involving stolen source code, unpatched vulnerabilities, and customer configurations — is a five-alarm crisis for digital infrastructure. The attack exposes national security risks, vendor concentration dangers, and the fragility of our IT foundations.
The post When...
The lights switch on as you walk in. The air adjusts to your presence. Somewhere in the background, a server notes your arrival. It’s the comfort of a smart building, but that comfort might come with a cost. Smart buildings use digital systems that collect information about how people move and work....
What happens when investigators and cybercriminals start using the same technology? AI is now doing both, helping law enforcement trace attacks while also being tested for its ability to conceal them. A new study from the University of Cagliari digs into this double-edged role of AI, mapping out how...
At Help Net Security, we’ve been tracking the cybersecurity world for nearly three decades. Through our Industry News section, we’ve watched countless companies rise, and push the limits of what’s possible in data protection. Some vendors consistently stand out, not just for their products but for h...
CISO Open-Xchange | Germany | Remote – View job details As a CISO, you will lead the development and implementation of security strategies and requirements across the OX Group. You will advise management on information security matters, provide transparent reporting, and drive continuous improvement...
China’s claim that the US National Security Agency (NSA) was behind a cyber attack against the country’s timekeeping centre could be true, says an expert.
“From a technical perspective, China’s allegation about an NSA hack on its national timekeeping center is plausible and...
I hadn't intended to drive for 16 hours. It's around midnight and my friend and I are about two hours away from Bright Angel Lodge at the South Rim of the Grand Canyon. I pull over for gas, to stretch my legs, and wake myself up.Â
"Can you drive for a couple hours?" I ask.
"Oh yeah." He replies.
I f...
McIntosh Laboratory, Inc. experienced a cyber attack that may have impacted some of the affected individuals' information. The attack occurred between October 17 and 19, 2025, and the perpetrator accessed and acquired certain data. A cyberattack against McIntosh Laboratory was claimed by Safepay on...
Cottage Hospital suffered a data breach where an unauthorized party accessed their computer network and stole employee and physician information, including names, Social Security numbers, driver's license numbers, and bank account information. A cyberattack was claimed by Qilin on December 3, 2025.
Unit 42 shares notable developments of cybercrime group Scattered LAPSUS$ Hunters. Learn how this group may operate in the future.
The post The Golden Scale: Notable Threat Updates and Looking Ahead appeared first on Unit 42.