> TODAY'S SUMMARY (108 articles)
Today's cybersecurity news highlights several critical incidents and trends. A global outage of Microsoft 365 services, affecting Outlook and Teams, is raising concerns about potential exploitation by cybercriminals during the disruption. In data breach news, Uber confirmed the theft of thousands of drivers' licenses due to a security incident at a cloud service provider, while TSMC reported a data breach linked to a cloud vendor, emphasizing the risks associated with third-party services. Additionally, the FBI has attributed over $400 million in cryptocurrency theft to North Korean hackers using deepfake video calls. On the malware front, the international law enforcement operation "Endgame" successfully disrupted Gootloader and CastleRAT infrastructures, while new vulnerabilities in Check Point gateways have been exploited for destructive attacks. Phishing attacks are surging, particularly in Europe, with notable increases in detection rates.
|
// AI-powered summary generated at 16:00
Over 262K F5 BIG-IP devices exposed after threat actors stole source code and data on undisclosed flaws in a recent F5 breach. Over 262,000 F5 BIG-IP devices are exposed online after F5 confirmed a breach by nation-state actors who stole source code and data on undisclosed flaws. The Shadowserver Fo...
Anthropic partnered with the US government to create a filter meant to block Claude from helping someone build a nuke. Experts are divided on whether its a necessary protection—or a protection at all.
A former Madison Square Garden executive alleges the company used facial recognition technology to target critics and violate privacy, leading to a wrongful termination and discrimination lawsuit. The case raises major concerns about surveillance, biometric data misuse, and privacy rights.
The post...
AWS outage has taken down millions of websites, including Amazon.com, PrimeVideo, Perplexity AI, Canva and more. [...]
AWS outage has taken down millions of websites, including Amazon.com, Prime Video, Perplexity AI, Canva and more. [...]
Alerte ZATAZ : la page Facebook « Aide financière official » promet 20 000 € pour des aides à destination de personnes handicapées....
Several security issues were fixed in Samba.
China und USA werfen sich gegenseitig immer wieder Cyberangriffe vor.rawf8 – shutterstock.com
China hat den USA Cyberangriffe auf eine zentrale staatliche Zeitbehörde vorgeworfen. Nach Angaben des Ministeriums für Staatssicherheit soll die US-Nachrichtendienstbehörde NSA sei...
Envoy Air, which operates the American Eagle brand, has confirmed that business information was stolen by hackers.
The post American Airlines Subsidiary Envoy Air Hit by Oracle Hack appeared first on SecurityWeek.
Synthèse 2015–2025 : EDR, SASE, zero trust, IA et XDR. Leçons pratiques pour renforcer la sécurité réseau.
...
Once more into the, er, breach? The UK's Armed Forces veterans are being tasked with one last mission – proving the government can successfully roll out a digital ID card scheme.…
Presently sponsored by: 1Password Extended Access Management: Secure every sign-in for every app on every device.You're not going to believe this - the criminals that took the Qantas data ignored the injunction 😮 I know, I know, we're all a bit stunned that making crime illegal hasn't appeared to s...
A list of topics we covered in the week of October 13 to October 19 of 2025
Enterprises have long relied on firewalls, routers, VPN servers, and email gateways to protect their networks from attacks. Increasingly, however, these network edge devices are becoming security liabilities themselves.
Every few weeks, another crisis plays out: Security team...
A foreign threat actor infiltrated the Kansas City National Security Campus (KCNSC), a key manufacturing site within the National Nuclear Security Administration (NNSA), exploiting unpatched Microsoft SharePoint vulnerabilities, according to a source involved in an August inci...
Vous cherchez une idée simple et touchante pour faire vivre vos photos au quotidien ?...
A step-by-step, human-first guide on migrating from Azure AD B2C to passwordless authentication using modern OIDC providers like MojoAuth — with real-world lessons and pitfalls to avoid
The post How to migrate to passwordless from Azure B2C appeared first on Security Boulevard.
I found another piece of malware this weekend. This one looks more like a proof-of-concept because the second-stage payload is really "simple", but it attracted my attention because it uses a nice technique to obfuscate the code.
USN-7826-1 fixed vulnerabilities in Samba. This update provides the
corresponding update for Ubuntu 14.04 LTS, Ubuntu 16.04 LTS, Ubuntu
18.04 LTS and Ubuntu 20.04 LTS.
Original advisory details:
Andrew Walker discovered that Samba incorrectly initialized memory in the
vfs_streams_xattr module. A...
Most research on LLM privacy has focused on the wrong problem, according to a new paper by researchers from Carnegie Mellon University and Northeastern University. The authors argue that while most technical studies target data memorization, the biggest risks come from how LLMs collect, process, and...