Today's cybersecurity landscape highlights critical vulnerabilities in widely used software and active exploitation campaigns, alongside significant international law enforcement successes against cybercrime. These events underscore the continuous need for vigilance and timely security updates to protect digital assets.
PostgreSQL Patches Critical 22-Year-Old Remote Code Execution VulnerabilityVulnerability
PostgreSQL has released patches for 52 security flaws, including a critical 22-year-old type confusion vulnerability (CVE-2026-6460). This flaw could allow an authenticated database user with object creation privileges to execute arbitrary code on the server. Full remediation requires not only applying the update but also rebuilding any C-language extensions.
Why it matters: If your business uses PostgreSQL, immediately applying these patches and rebuilding C-language extensions is crucial to prevent unauthorized code execution and maintain database integrity.
Read more at The Hacker News ↗
Hackers Exploiting Check Point PHP2Shell Flaws to Deploy Destructive MalwareVulnerability
Threat actors are actively exploiting unpatched PHP2Shell vulnerabilities in Check Point Security Gateways. These attacks allow initial access, followed by the use of a newly reported local privilege escalation flaw in Gaia OS to deploy a backdoor named TSGA, which can wipe VMware ESXi files. The campaign began in late October, initially targeting Israeli organizations.
Why it matters: Businesses using Check Point Security Gateways must apply emergency hotfixes immediately to prevent attackers from gaining root access, deploying malware, and potentially wiping critical data.
Read more at The Hacker News ↗
International Law Enforcement Disrupts Major Malware InfrastructureThreat
An international police operation, 'Operation Endgame,' successfully dismantled server infrastructure used by prominent malware families including Gootloader, CastleRAT, and StealC. These tools were responsible for gaining unauthorized computer access, stealing credentials, and launching ransomware attacks. Authorities seized 235 servers, 257 domains, and approximately 6.4 million stolen logins belonging to over 40,000 victims.
Why it matters: While this is a significant win against cybercrime, it's a reminder that similar threats constantly emerge; businesses should maintain strong security practices, including multi-factor authentication and robust endpoint protection.
Read more at The Hacker News ↗
North Korean Hackers Steal Over $400 Million in Crypto Using Deepfake Video CallsThreat
The FBI has confirmed that North Korean state-sponsored threat actors have stolen more than $400 million in cryptocurrency over the past 18 months through a social engineering scheme called 'FaceStealer.' This operation involved using deepfake video calls to impersonate individuals and deceive victims into revealing sensitive information or transferring funds.
Why it matters: Be highly suspicious of unsolicited video calls, especially those requesting sensitive financial actions. Always verify identities through established, independent channels to avoid falling victim to sophisticated social engineering.
Read more at The Hacker News ↗
Trezor Confirms Hardware Implants in Wallets Sold by Reseller CryptoBilisBreach
Trezor has confirmed that three Safe 5 hardware wallets purchased from the reseller CryptoBilis contained malicious hardware implants. These implants were designed to intercept and transmit recovery phrases from the wallet's screen over mobile networks to attackers. Trezor investigated one such wallet and identified others with identical implants.
Why it matters: When purchasing hardware wallets or other sensitive security devices, always buy directly from the manufacturer or authorized, reputable dealers to avoid potentially compromised products and ensure the security of your assets.
Read more at The Hacker News ↗
SilentAir Group Hijacks Telecom Networks to Spy on Taiwanese UsersThreat
A newly identified state-level espionage group, SilentAir, has been found to compromise equipment within Asian mobile operators. This allowed them to intercept calls and SMS messages from specific individuals, primarily in Taiwan. The group's attack infrastructure was discovered in at least six different Asian countries.
Why it matters: Relying solely on SMS for two-factor authentication can be risky. For critical accounts, consider using more secure methods like authenticator apps or hardware security keys, which are less susceptible to telecom network compromises.
Read more at The Hacker News ↗
German Parliament Grants Spy Agencies Expanded Hacking and Sabotage PowersPolicy
Germany's Bundestag has passed a significant overhaul of its spy laws, granting intelligence agencies new powers for hacking and digital sabotage. This legislation marks the most extensive revision of the country's espionage regulations in the post-war era, with the bill passing by a considerable margin.
Why it matters: While primarily affecting national security, such legislative shifts can influence the broader cybersecurity landscape and privacy discussions, potentially setting precedents for how governments interact with digital data and infrastructure.
N-able Patches Flaws Exploited in 21 N-central ServersVulnerability
N-able has announced additional security measures and restrictions in response to the public disclosure and exploitation of new vulnerabilities, tracked as 4EverAble2Shell and Agent2Shell, in its N-central platform. Attackers have already exploited these flaws on at least 21 servers, including 19 that had applied Hotfix 2.
Why it matters: If your business uses N-able N-central, ensure all available patches are applied immediately and follow N-able's updated guidance to secure your systems against active exploitation.
Read more at The Hacker News ↗
City of Osaka Experiences Data Breach Impacting 1 Million ResidentsBreach
The City of Osaka, Japan's third-largest city, has issued a warning to its 2.8 million residents about a data breach affecting approximately 1 million people. While the exact stolen information was not fully disclosed, residents are advised to be vigilant against suspicious emails that appear to originate from the local government.
Why it matters: This incident highlights the importance of data breach preparedness and prompt communication. For businesses, it's a reminder to regularly review security measures, train employees on phishing awareness, and have a clear incident response plan.
NYC Moves to Ban 'Surveillance Pricing'Policy
New York City is moving to implement a ban on 'surveillance pricing,' a practice where companies charge different prices based on an individual's collected data. The city government will have the authority to impose fines of $1,000 for each verified instance of this practice, reflecting growing national momentum against such data-driven discrimination.
Why it matters: This new regulation in NYC underscores increasing scrutiny on how businesses use customer data. Companies, especially those operating or serving customers in NYC, should review their pricing strategies to ensure compliance and avoid potential penalties.
This round-up is compiled and summarised in our own words from public reporting; follow the links above for full details at the original sources.