> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Google’s Project Zero team will provide limited details of new vulnerabilities early following discovery, in a bid to speed up end users’ patching
32.1% of vulnerabilities listed in VulnCheck’s Known Exploited Vulnerabilities catalog were weaponized before being detected or within the following day
A gameplay guide to share the new Datadog expansion pack of Backdoors & Breaches, including how to play and starter scenarios.
IBM found that the global average cost of a data breach has fallen by 9% compared to 2024, driven by improved detection and containment
A total of 396 compromised Microsoft SharePoint systems have been identified globally, affecting 145 organizations across 41 countries in the wake of the ToolShell zero-day vulnerability
The breach details are unclear, but it appears to be a complex incident involving multiple entities and potential data exposure. The exact nature and scope of the breach are unknown. Further investigation is required to determine the full extent of the incident.
The comprehensive guidance focuses on technical recommendations for securing agentic AI applications, from development to deployment
Catholic Charities of the Diocese of Albany suffered a data breach due to unauthorized access to their network between March 29, 2025, and July 31, 2025. The breach may have involved names and other personal data. A cyberattack against the Catholic Charities of the Diocese of Albany was claimed by P...
H&H Color Lab suffered a data breach on July 30, 2025, where an unauthorized third party gained access to a portion of their computer network and accessed or acquired some of the files on their network. The impacted files potentially contained personal information of individuals, including their ful...
Some of Orange’s professional and consumer services may be disrupted for a few days because of the cyber incident
An unauthorized person gained access to and copied information from VFWM's network on July 30, 2025, resulting in the exposure of personal information of two Maryland residents. The breach was discovered on July 30, 2025, but the impacted data was not validated and enriched until January 5, 2026. VF...
ESET PROTECT version 6.4 has been released.
A joint blog post by the NCSC’s National Resilience Director, Jonathon Ellison, and Chief Technology Officer, Ollie Whitehouse.
Flaw in Base44 allowed unauthorized access to private apps, bypassing authentication systems
Posted by Tim Willis, Google Project Zero
In 2021, we updated our vulnerability disclosure policy to the current "90+30" model. Our goals were to drive faster yet thorough patch development, and improve patch adoption. While we’ve seen progress, a significant challenge remains: the time it takes for...
Backdoor malware Auto-Color targets Linux systems, exploiting SAP NetWeaver flaw CVE-2025-31324
Hackers are actively exploiting two critical flaws in Cisco Identity Services Engine, said the US Cybersecurity and Infrastructure Security Agency
Not all browser add-ons are handy helpers – some may contain far more than you have bargained for
The federal government has applied for forfeiture of the funds, which were seized by FBI Dallas in April 2025
A Scottish charity has been fined ÂŁ18,000 for systematic data protection failings