> TODAY'S SUMMARY (15 articles)
Today’s cybersecurity landscape features several key updates and threats. Let’s Encrypt has announced a reduction in default TLS certificate validity from 90 days to 64 days starting February 2027, prompting website owners to renew more frequently. A new AI-driven campaign by CyberXero has compromised over 628,000 records from Ukrainian sources, targeting WordPress and e-commerce platforms. Additionally, Windows Update users face potential disruptions in 2027 due to expiring certificates, affecting those who do not maintain system updates. In other news, the emergence of a threat from CyberLeek involves potential leaks of a playable GTA 6 build tied to cryptocurrency market dynamics. Lastly, vulnerabilities in the Perl DBI module have been reported, allowing for possible arbitrary code execution.
|
// AI-powered summary generated at 08:00
La société de gestion des avantages sociaux Paylogix a été victime d'une cyberattaque. Des pirates informatiques ont volé des informations sensibles, y compris des numéros de sécurité sociale, des données financières, des informations de santé et des numéros de passeport, appartenant à des dizaines...
We're looking to hear from people involved in evaluating, selecting or adopting EASM.
People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different brands built on MediaTek platforms. The malware shi...
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.
The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek.
This week on The Kettle, we discuss some arrests and how Mythos' mathematical expertise has led to a second exploited bug that no human would have found
NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through.
The post Your AI agent is only as safe as the packages it downloads appeared first on CyberScoop.
The FBI has arrested a Canadian cybersecurity executive as it continues its crackdown on ShinyHunters
Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said “all confirmed cases related to the disclosed draining incident of Oct 9th, 2026, involve devices sold...
CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is an operation that combines traditional hacking tools with AI agents to carry out cyberattacks. According to SOCRadar researchers, the attackers u...
Vacaf : un vendeur pirate informatique revendique 1,39 million de lignes sur des familles et des enfants.
ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.
The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrar...
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek.
Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers
Year after year CISOs see the volume, velocity, and sophistication of attacks increase. They also see their attack surfaces expand and increase in complexity.
Advances in artificial intelligence and the rapid growth of AI use in business are also impacting the security agen...
Une machine à café connectée Keurig a envoyé plus d'un téraoctet de données en dix jours, au point de saturer un point d'accès Wi-Fi.
Le post Une machine à café connectée envoie plus de 1 To de données en 10 jours sur le Wi-Fi a été publié sur IT-Connect.
Beginning February 2027, all newly issued certificates will have a 64-day validity period by default.
The post Let’s Encrypt Cuts Default Certificate Validity to 64 Days Ahead of 45-Day Switch appeared first on SecurityWeek.
Microsoft is advising users and businesses to update Windows devices before digital certificates used to verify Windows Update servers expire in May and June 2027. The certificates expire on May 17 or June 19, depending on the Windows version. Devices without replacement certificates will lose acces...
Cybersecurity researchers have disclosed details of a two-pronged artificial intelligence (AI)-augmented initial access campaign targeting WordPress sites, e-commerce platforms, and critical infrastructure entities in Ukraine.
The activity, which brings together commodity offensive tools like Cobal...
Les certificats de Windows Update expirent en mai et juin 2027. Les PC pas suffisamment à jour perdront l'accès aux mises à jour. Qui est concerné ?
Le post Windows Update : certains PC et serveurs seront privés de mises à jour en 2027 à cause de certificats expirés a été publié sur IT-Connect.