> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
De multiples vulnérabilités ont été découvertes dans Google Android 17. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance.
Continuing our Agent ID series, this post demonstrates how a privileged agent could be compromised through its third-party blueprint. This leads to a cross-tenant incident similar to Midnight Blizzard, since an attacker with control over an agent blueprint can authenticate as any agent associated wi...
La ville d'Oranienburg a temporairement désactivé son réseau administratif en réponse à une cyberattaque détectée par des experts en informatique. Cette mesure préventive a été prise suite à une alerte du Cert Brandenburg. La compromission effective du réseau n'a pas été établie. Les services admini...
Le Stadttheater Gießen a été victime d'une cyberattaque menée par un groupe qualifié de « hautement professionnel et mondial ». L'attaque, survenue le 18 juin, a rendu inaccessibles toutes les données et sauvegardes du théâtre. Bien que les canaux de communication réguliers soient hors service, les...
Microsoft Threat Intelligence analyzed a cryptocurrency clipper campaign that combines clipboard theft, wallet replacement, Tor-based communications, and worm-like propagation. Beyond stealing cryptocurrency transactions, the malware establishes persistent access and enables follow-on activity throu...
La Széchenyi Programiroda a été victime d'une cyberattaque partielle, suite à laquelle des données de l'entreprise et de deux de ses employés ont été compromises. L'attaque a été attribuée au groupe Rhysida hekkercsoport, qui a exigé 20 bitcoins en échange des données. Les autorités nationales de cy...
Le Cameron Regional Medical Center a été victime d'une attaque par ransomware. L'incident a été découvert le 18 juin 2026. Le groupe Anubis a revendiqué l'attaque le 3 août 2026, affirmant avoir obtenu une large gamme de données, incluant dossiers médicaux, informations financières, données personne...
What if your AI coding assistant could be tricked into stealing your own company's secrets - by reading a single booby-trapped bug report? No phishing email. No malware. No password ever stolen. Just an AI doing exactly what it was told.
Meanwhile, someone themselves Nightmare Eclipse has decided...
New openssl packages are available for Slackware 15.0 and -current to fix security issues.
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
The ability to access publicly available information using automated tools is a central value and benefit of a free and open internet. Automated access—often called crawling or scraping—powers important, useful tools for locating, preserving, and analyzing online information. For example, crawling a...
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
New libidn packages are available for Slackware 15.0 and -current to fix security issues.
From August 3, 2026, Google will use IP addresses from UK, EEA and Switzerland users for ad measurement and personalization. It lands as the ICO weighs new consent rules, and years after Google itself called using such signals to identify devices "wrong." [...]
New bind packages are available for Slackware 15.0 and -current to fix a security issue.
The NO FAKES Act is supposed to target harmful AI-generated impersonations. But in reality, it will make it easier to suppress commentary, satire, and other lawful speech. That's why EFF has signed a letter urging the Senate Judiciary Committee not to advance the bill in its current form.
Take actio...
Attackers are using fake job offers and malware to steal accounts, Robux, and Roblox games from the developers who build them.
njs could be made to crash or run programs if it received a specially crafted input.
The Agents SDK is now a runtime any agent framework can build on. Today we're opening up the Agents SDK primitives, with Flue as a first framework targeting Agents SDK, and rolling out agents in the dashboard.
Read how Microsoft Security has advanced its agentic vulnerability detection system, codename MDASH, integrating into real-world workflows across Windows, Azure, and identity systems.
The post Beyond the benchmark: Advancing security at AI speed appeared first on Microsoft Security Blog.