> TODAY'S SUMMARY (152 articles)
Today's cybersecurity news highlights a range of significant threats and trends:
1. The City of Osaka has reported a data breach affecting 1 million residents, urging caution against phishing attempts disguised as government communications.
2. Trezor confirmed that malicious implants in hardware wallets sold by a reseller can steal sensitive recovery phrases, emphasizing risks in the cryptocurrency market.
3. Microsoft is grappling with a global outage of its 365 services, attributed to a bad update, raising concerns over the potential exploitation of this chaos by cybercriminals.
4. Security vulnerabilities in Check Point gateways have been exploited to deploy destructive malware, highlighting critical risks in security infrastructure.
5. New insights indicate that AI is influencing the evolution of ransomware tactics, suggesting that attackers may soon leverage AI for more sophisticated operations.
6. The FBI has linked North Korean hackers to significant cryptocurrency thefts, further stressing the ongoing threat posed by state-sponsored cybercrime.
7. Phishing incidents have surged in Europe, outpacing global trends, underscoring the need for enhanced vigilance and protection mechanisms against social engineering attacks.
|
// AI-powered summary generated at 20:01
Indirect prompt injection can poison long-term AI agent memory, allowing injected instructions to persist and potentially exfiltrate conversation history.
The post When AI Remembers Too Much – Persistent Behaviors in Agents’ Memory appeared first on Unit 42.
The platform said in a press release that hackers breached a third-party vendor that Discord uses for age-related appeals.
Just 250 malicious training documents can poison a 13B parameter model - that's 0.00016% of a whole dataset Poisoning AI models might be way easier than previously thought if an Anthropic study is anything to go on. …
As all things old are new again, a bill that would make obtaining bad patents easier and harder to challenge is being considered in the Senate Judiciary Committee. The Patent Eligibility Restoration Act (PERA) would reverse over a decade of progress in fighting patent trolls and making the patent sy...
Mobdro Pro IP TV + VPN hides Klopatra, a new Android Trojan that lets attackers steal banking credentials.
Learn. Secure. Lead.
We’re excited to introduce the beta launch of Sucuri Academy—a cutting-edge learning platform designed to empower website owners, developers, and digital professionals with the skills to defend against cyber threats.
Whether you’re just starting out or looking to master advanced...
Martin muses on why computers are less fun than campfires, why their dangers seem less real, and why he’s embarking on a lengthy research project to study this.
The alleged targeting of prominent Italian businessman Francesco Gaetano Caltagirone now widens the Paragon spyware scandal in Italy to victims beyond journalists and activists.
“We are going to do everything in our power to fight this,” says ICEBlock developer Joshua Aaron after Apple removed his app from the App Store.
A China-aligned threat actor codenamed UTA0388 has been attributed to a series of spear-phishing campaigns targeting North America, Asia, and Europe that are designed to deliver a Go-based implant known as GOVERSHELL.
"The initially observed campaigns were tailored to the targets, and the messages p...
The mass-hacks targeting Oracle E-Business customers is the latest hacking campaign by Clop, an extortion group known for abusing security flaws in enterprise products to steal large amounts of sensitive data.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
Security is a core focus at Microsoft Ignite 2025, reflected in dedicated sessions and hands-on experiences designed for security professionals and leaders. Take a look at the session catalog.
The post Securing agentic AI: Your guide to the Microsoft Ignite sessions catalog appeared first on Micro...
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see [Google Chrome Releases](https://chromereleases.googleblog.com/202[SS9.1]5) for more information.
A rapidly evolving Android spyware campaign called ClayRat has targeted users in Russia using a mix of Telegram channels and lookalike phishing websites by impersonating popular apps like WhatsApp, Google Photos, TikTok, and YouTube as lures to install them.
"Once active, the spyware can exfiltrate...
Microsoft Threat Intelligence has identified a financially motivated threat actor that we track as Storm-2657 compromising employee accounts to gain unauthorized access to employee profiles and divert salary payments to attacker-controlled accounts, attacks that have been dubbed “payroll pirate”.
T...
The following updated rpms for Oracle Linux 7 have been uploaded to the Unbreakable Linux Network:
Amped Software’s Alexander Fehrmann explains how fingerprints, shoeprints, and other impressions become courtroom-ready with Amped FIVE.
At Black Hat USA 2025 and DEF CON 33, PortSwigger's Director of Research, James Kettle, unveiled new HTTP desync techniques that prove one thing beyond doubt: HTTP/1.1 is broken, and every organizatio