> TODAY'S SUMMARY (108 articles)
Today's cybersecurity landscape highlights several significant threats and trends. AI models continue to leak sensitive corporate data, with over 13,000 exposed images identified by Glow Security. A major breakthrough in law enforcement occurred with the arrest of a ShinyHunters leader in the Netherlands, coinciding with recent high-profile hacks, including an attack on the FBI. Russian threat actor Star Blizzard has refined phishing techniques, while Citrix NetScaler is facing mass exploitation of a zero-day vulnerability (CVE-2026-88771). Apple has patched a critical zero-day flaw (CVE-2026-86950) linked to sophisticated attacks, underscoring ongoing vulnerabilities in popular software. Additionally, the Pentagon personnel agency breach affecting 3 million individuals emphasizes the persistent risk to sensitive government data.
|
// AI-powered summary generated at 16:00
ONS report also says consumer-reported offenses remained flat
Twitter reveals true extent of celebrity account hijacking campaign
Previously I talked about remotely debugging Chrome, and we also covered the latest Microsoft Edge browser along the way.
These features allow an adversary to gain access to authentication tokens and cookies. See MITRE ATT&CK Technique T1539: Steal Web Session Cookie as well for this.
What about...
German law deemed insufficient at protecting citizens’ right to privacy
US government agencies told they have 24 hours to fix SIGRed vulnerability
A technique on Windows that is less known is how to do basic port-proxying.
Proxying ports is useful when a process binds on one (maybe only the local) interface and you want to expose that endpoint on another network interface.
Let’s say you have an existing process that listens only on the loopbac...
Data Protection Officers and businesses should take action immediately in light of the end of Privacy Shield
New organization will have power to ban insecure consumer gadgets
Smart contract authors can now express security properties in the same language they use to write their code (Solidity) and our new tool, manticore-verifier, will automatically verify those invariants. Even better, Echidna and Manticore share the same format for specifying property tests. In other w...
MyCastingFile database left unsecured online
Government statement comes ahead of much delayed intelligence report
New cybersecurity initiative finds more than half of Canadians are cybercrime victims
Illinois residents sue Google, Amazon, and Microsoft over faceprints’ acquisition
Cleverly faked airport websites prompt FBI to issue warning to travelers
75% predict a backlog of data subject access requests
Russian state-sponsored hackers target COVID-19 vaccine manufacturers
Ivan Pittaluga will oversee the strategy and development of solutions at the data and ransomware protection provider
Mobile operator’s new platform verifies a customer’s identity in real time
Max Schrem’s challenge to Facebook Ireland sees Privacy Shield deemed invalid
13% of all phishing attempts in Q1 were linked to COVID-19