This is a newsletter designed to end cybersecurity news overload by aggregating the latest developments from thousands of sources and summarizing them smartly.
Cybersecurity
Jordanian national pleads guilty to access broker charges, Acting head of CISA was blocked by colleagues from removing CIO, Iranian campaign sought to steal GMail and other account credentials, Man pleads guilty to hacking US S.Ct., DPRK hackers pose as human rights orgs, much more
Cybersecurity
Estonia served as the first target of Russian cyberattacks, Inside a sprawling scam compound in Myanmar, How to protest safely amid massive surveillance, Silicon Valley is now the tech handmaiden of US authoritarianism, It's hard to gain access control over AI agents
Cybersecurity
Grubhub confirms data breach, China's UAT-8837 breached CIC orgs in N. America, Hackers exploit top severity flaw in Modular DS WordPress plugin, Flaw in MD CPUs exposes secure virtualization environment, Gemini 'personal intelligence' will scan everything, much more
Cybersecurity
Google's Fast Pair protocol enables hackers to connect with audio accessories, Shipping-related firm Bluspark Global patched a raft of flaws, Kimwolf botnet may have hit its maximum potential, CNIL fined French mobile companies for data breach, Cyber authorities warn of OT threats, much more
Cybersecurity
White House renominates Plankey as CISA Director, Whistleblower leaks sensitive data on ICE and Border Patrol workers, Man to plead guilty for hacking Supreme Court system, Microsoft issues fixes for 114 flaws, Belgian hospital forced to cancel procedures after cyberattack, much more
Cybersecurity
Poland thwarted power system cyberattack, Hackers accessed the systems of Spanish energy provider Endesa and Energía XXI, Personal finance platform Betterment was hacked through third-party, Dutch national sentenced to seven years for hacking, Korea's Kyowon Group hit with ransomware, much more
Cybersecurity
Authorities bust 34 alleged members of the Black Axe cyber fraud group, BreachForums user database exposed in breach, Fancy Bear has launched credential harvesting attacks, NIST seeks agentic AI security input, MuddyWater launches spearphishing campaign in Middle East, much more
Cybersecurity
Kids turn from cybercrime to real-world violent thefts, How retailers profit from crypto ATM scams, Integrated web browsers are insecure out of the box, An MIT railroad club led to modern-day hackers, AI coding tools are susceptible to attacks, LLM guardrails are inherently exploitable
Cybersecurity
Prisoner swap sends alleged ransomware payment negotiator back to Russia, CISA retires ten emergency directives at once, Cambodian cybercrime kingpin extradited to China, Fugitive wanted for Desjardins breach arrested in Spain, Trans activists hacked Free Speech Union, much more
Cybersecurity
TX court enjoins Samsung from using or selling consumer data, FCC exempts some Chinese tech at Pentagon's request, Man accused of stealing Snapchat access codes for 600 women for Northeastern Univ. coach, Ni8mare flaw allows takeover of N8N workflow automation platform, much more
Cybersecurity
Korea warns of hacking forum that steals and sells data, NZ High court enjoins publication of stolen medical data, UK government launches $282m cyber action plan, Threat actor stole and threatens to leak data from insurer Prosura, Command injection flaw found in D-Link DSL routers, much more
Cybersecurity
Ledger third-party payment processor exposed customer data, UL Solutions withdraws from FCC Cyber Trust Mark, NordVPN denies breach saying hackers obtained only dummy data, Thefts stemming from 2022 LastPass breach still ongoing, Russian threat group uses Viber to deliver malware, much more