> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape sees several critical threats emerging. Northstar Security has launched with $7 million in funding to enhance vulnerability mapping and risk remediation using AI. A significant exploit involving a CVSS score of 10.0 was discovered in Canonical's LXD and MicroCloud, allowing attackers to impersonate trusted clients without a private key. In the crypto space, hackers hijacked a script on Polymarket, stealing approximately $2.7 million from traders. Additionally, the FBI has linked North Korea's TraderTraitor group to the record $6.43 billion theft from Binance. Meanwhile, a sophisticated malware known as NetamLoader is targeting government Windows 10 systems in Asia, raising alarms about its operational capabilities.
|
// AI-powered summary generated at 12:00
It was discovered that RabbitMQ Server incorrectly handled CORS wildcard
origin configuration. An attacker could possibly use this issue to cause
a cross-site request forgery attack. This issue only affected Ubuntu 18.04
LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, and Ubuntu 26.04
LTS...
A threat actor uploaded malicious packages to the Arch User Repository (AUR) that impersonated two popular helper tools, yay and paru. [...]
Cloudflare Gateway and Data Loss Prevention have inherited the flexibility and power of Cloudflare Workers through our full-stack integration with the Cloudflare Developer platform.
L'Agence Espagnole de Protection des Données (AEPD) lance un appel à contributions pour le troisième numéro de sa revue scientifique, la Revue Confidentialité, Innovation et Technologie (PIT), consacré à l'interaction du RGPD avec d'autres réglementations.Ce numéro, dont la publication est prévue po...
L'Autorité polonaise de protection des données personnelles (UODO) a transmis au Ministre de l'Énergie ses observations sur un projet de modification du règlement relatif aux systèmes de mesure de la consommation d'énergie.L'Autorité a mis en évidence un risque de collecte excessive de données sur l...
Matthew Green has a new site that tries to estimate the number of cryptanalyst-hours that have been spent analyzing different public-key algorithms:
Abstract: We estimate how much public cryptanalysis each public-key assumption has received, using the literature itself as the instrument. From roughl...
L'autorité norvégienne de protection des données (Datatilsynet) a publié un rapport sur l'utilisation d'un assistant d'intelligence artificielle pour la rédaction de comptes rendus dans les services de protection de l'enfance.Ce rapport, issu d'un projet mené dans son "bac à sable" réglementaire ave...
Un ingénieur d’OpenAI aurait caché un micro dans la salle de réunion de la direction. Prompts, vidéosurveillance, second micro : ce que révèle la plainte.
Le post OpenAI : un ingénieur arrêté pour avoir caché un enregistreur dans la salle de réunion de la direction a été publié sur IT-Connect.
We applied AWS Security Agent (now part of AWS Continuum), our autonomous penetration-testing agent, to 37 real, recently disclosed Common Vulnerabilities and Exposures (CVEs), each packaged as a live, containerized target with a flag hidden at the vulnerability’s intended sink. Starting from an una...
Candiru, an Israeli maker of spyware sold to governments, infected devices at the news network Al Jazeera through ordinary online ads, in attacks that needed no click or other action from the user, researchers at the Citizen Lab said Thursday.
The hidden attack code ran the moment an ad loaded on t...
The threat actor known as Silent Lynx has been attributed to a fresh set of attacks targeting government organizations across the Commonwealth of Independent States (CIS).
The activity, observed from June 2025 through August 2026, involves four different infection chains that make use of macro-enab...
Ce tutoriel explique comment analyser l'espace disque d'un NAS Synology avec QDirStat, l'Ă©quivalent de WinDirStat, pour identifier les fichiers volumineux.
Le post NAS Synology – Plus d’espace disque disponible, que faire ? a été publié sur IT-Connect.
On September 17th, 2026, we received a submission for a Second-Order SQL Injection vulnerability in Backuply, a WordPress plugin with more than 600,000 active installations. This vulnerability makes it possible for authenticated attackers with subscriber-level access and above to store a malicious S...
Une faille critique de l'app Collabora Built-in CODE de Nextcloud sert à déposer des webshells. La désactiver ne suffit pas : voici comment vous protéger.
Le post Nextcloud : des serveurs piratés via une faille critique de l’application Collabora Built-in CODE a été publié sur IT-Connect.
Several security issues were fixed in the Linux kernel.
Caseloads, AI, tools, hiring and careers: tell us what DFIR work looks like today. About 8 minutes, anonymous, with early access to the report
Israeli adtech outfit allegedly helped spyware vendors infect phones while enjoying Google's seal of approval
A cyberattack on Britain’s Legal Aid Agency (LAA) stole far older and broader records than the government previously disclosed.
Most of the data is related to applications, claims, and payments submitted between 2007 and 2025.
The post UK Legal Aid Agency Hack Scope Widens After Forensic Review appeared first on SecurityWeek.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- S390 architecture;
- IIO ADC drivers;
- Multiple devices driver;
- PCI subsystem;
- VFIO drivers;
- Networ...