> TODAY'S SUMMARY (29 articles)
Today's cybersecurity news highlights several significant threats and trends. The discovery of the GhostPat vulnerability in Docker Hub (CVE-2026-105445) allows attackers to impersonate users, emphasizing the need for stronger access controls. Additionally, the Hirudo Android Trojan is replacing legitimate banking apps to steal user credentials, posing a growing risk to mobile banking. On the corporate front, the Metropolitan Police faced scrutiny for improperly using a shoplifting platform, underscoring the importance of compliance with privacy regulations. In response to emerging threats, companies like Qualys and Palo Alto Networks are enhancing their cybersecurity tools, with Qualys introducing TruConfidence for automated risk remediation and Palo Alto addressing critical vulnerabilities in its PAN-OS. Meanwhile, Microsoft has dismantled a phishing marketplace responsible for over a billion malicious emails, highlighting the ongoing battle against cybercrime.
|
// AI-powered summary generated at 08:00
Instead of targeting end users with weaponized documents that encrypt their file system, this new breed of ransomware is targeting the web servers themselves.
Registered users' names, email addresses and order history have been accessed.
In just a couple of weeks, tens of thousands of students and professionals from all over the world will tune in to cheer on their favorite teams in six competitions. If you’ve been following our blog for some time, you’ll know just what we’re referring to: Cyber Security Awareness Week (CSAW), the n...
The bot is used to send spam email, capture sensitive information or download and execute malicious files.
Computer code and cyber-weapons capable of killing adversaries will be developed under a new half-billion-dollar military contract.
L’inactivité apparente (bon ok… réelle) de ce blog ces derniers mois cache un regain d’activité bien réel sur le terrain, en droite ligne du dernier article en date. Cependant vue l’actualité et les événements à venir, il devenait urgent de [...] Lire la suite
About 10% of employees have lost a device with sensitive business info, 12% use shadow IT and 37% have access to information that is above their position.
The group has leaked more than 3,500 names, email addresses and contact numbers of law enforcement and military personnel.
Kaspersky Lab's investigation into the connected home discovered that almost all of the devices tested contained vulnerabilities.
XcodeGhost has maintained persistence—and has indeed evolved to become even more dangerous.
Most organizations fail to secure the holes within their environment faster than cyber-criminals can wreak havoc.
The Angler exploit kit has freshened up with new Flash exploits and watering-hole techniques.
Android, Apple, iOS and TouchID users can leverage FIDO authentication in devices, services and applications instead of passwords.
Visitors to forums based on vBulletin and possibly Foxit Software are in danger of having their personal information stolen.
Bit9 + Carbon Black warns ‘security by obscurity’ no longer offers protection
Cloudmark report urges Big Blue to crack down on Brazilian crime.
Don’t expect a ‘one-shot silver bullet.’
CSC and NetCracker cough up in whistleblower-led civil case
Displaying intrusive advertisements to consumers remained the main method of profiting from mobile threats.
As part of its current cloud security strategy, content delivery network firm Akamai has acquired secure web gateway (SWG) technology provider Bloxx.