[MY_SUBSCRIPTIONS]

Get cybersecurity news alerts delivered to your inbox

📡 [FLUX RSS]

Subscribe to the news feed

7 derniers jours

> FILTERS

> Last 7 Days

> TODAY'S SUMMARY (1 articles)

|

// AI-powered summary generated at 08:00

> Burger King Japan data breach exposes 11 million customer records
Burger King Japan, the Japanese subsidiary of global fast-food giant Burger King, disclosed a major data breach after attackers accessed a server containing 11.18 million customer records. [...]
> Oracle Linux lrzsz Important Fixes for Bugs CVE-2026-105840 ELSA-2026-83525
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8 grafana Important Code Execution Patch ELSA-2026-83544
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> “Spray and pray” job applications could make it harder for you to spot a scam
Sending out lots of job applications without keeping track could make a scammer’s message look like a reply you’ve been waiting for.
> Oracle Ghostscript Key Buffer Overflow Sandboxing Notice ELSA-2026-83552
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> Oracle Linux 8 rpcbind Remote DoS Advisory ELSA-2026-83563 CVE-2026-94640
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
> BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts
A cyber incident affecting contractor BAE Systems has knocked out the Bankruptcy Noticing Center, halting notices nationwide for a week. The post BAE Systems Security Incident Stalls Notices From US Bankruptcy Courts appeared first on SecurityWeek.
> Forensic Windows – Partie 16 : révéler les secrets des navigateurs Web (Chrome et Edge)
Historique, téléchargements, cookies, identifiants, favoris : où Chrome et Edge stockent leurs traces sous Windows et comment les analyser en forensic. Le post Forensic Windows – Partie 16 : révéler les secrets des navigateurs Web (Chrome et Edge) a été publié sur IT-Connect.
> Linux kernel gets a fix for a flaw that enabled attackers to escape VMs
The Linux kernel’s networking stack was found vulnerable to a guest-to-host escape attack, in which an attacker operating inside a virtual machine (VM) could cross the isolation boundary and access the underlying host. Dubbed PwnEscape and tracked as CVE-2026-99999, a flaw...
> Scammers clone candidates’ voices to steal cash and voter data ahead of 2026 midterms, FBI warns
Three weeks before Americans vote in the 2026 midterm election, fraudsters are borrowing candidate names, logos and slogans to collect fake donations and harvest personal data, the FBI warned. “The FBI warns the public that scammers could exploit the 2026 US Midterm Election to perpetrate financial...
> AI Decision Models and Their Impact on AI SOC Platforms
In the space of a month, a new category of AI model went from nonexistent to everywhere. TypeSafe AI released Jev on September 15 and called it a System One model, a nod to Kahneman's fast, intuitive thinking. OpenAI announced its own Decisions API at DevDay and opened a public beta on October 6. Cr...
> U.S. CISA adds Atlassian flaw to its Known Exploited Vulnerabilities catalog
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Atlassian flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added an Atlassian flaw, tracked as CVE-2026-21589 (CVSS score of 9.3), to its Known Exploited Vulnerabili...
> Backdooring Open-Weight AI Models
This is a problem: Any open model whose weights have been edited can carry a backdoor, whether it’s a task-specific fine-tune, a merged adapter or an abliterated build. We have abliterated models in the title because it’s the most popular reason people download modified weights without verifying wha...
> Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day
Armory Castle exploited CVE-2026-102764 for initial access, deployed custom tools, and deleted logs and artifacts. The post Chinese APT Exploited BeyondTrust Vulnerability as Zero-Day appeared first on SecurityWeek.
> InfoSec News Nuggets – 10/16/2026
Citizen Lab Traces Zero-Click Candiru Spyware Infections at Al Jazeera to Targeted Online Ads Researchers at the University of Toronto’s Citizen Lab say Israeli mercenary spyware vendor Candiru infected devices at news network Al Jazeera through ordinary online ads that required no click or user int...
> OpenAI sued over children safety and data use
Eight US states and a mother of two accuse the ChatGPT maker of putting children’s safety and privacy at risk.
> OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks
Left without funds for a coding task, an OpenAI model spent test crypto from a stranger’s wallet and left it out of its report. The post OpenAI Models Hacked Data Portals, Raided a Crypto Wallet to Finish Tasks appeared first on SecurityWeek.
> Krybit ransomware: what you need to know
Krybit is a fast-growing ransomware gang that was hacked by a rival, hit back, and is still extorting victims. Find out how it works, who it has targeted, and what organisations can do to protect themselves. Read more in my article on the Fortra blog.
> BeyondTrust zero-day tied to Chinese spies puts Remote Support users on alert
Organizations running self-hosted BeyondTrust Remote Support should treat exposed appliances as potentially compromised after a suspected Chinese espionage group exploited a critical zero-day to gain root control, access credential vaults, and establish footholds for lateral m...
> Ubuntu RabbitMQ Server Important Cross-Site and DoS Issues USN-8933-1
Several security issues were fixed in RabbitMQ Server.