> TODAY'S SUMMARY (8 articles)
Today's cybersecurity landscape sees several critical threats emerging. Northstar Security has launched with $7 million in funding to enhance vulnerability mapping and risk remediation using AI. A significant exploit involving a CVSS score of 10.0 was discovered in Canonical's LXD and MicroCloud, allowing attackers to impersonate trusted clients without a private key. In the crypto space, hackers hijacked a script on Polymarket, stealing approximately $2.7 million from traders. Additionally, the FBI has linked North Korea's TraderTraitor group to the record $6.43 billion theft from Binance. Meanwhile, a sophisticated malware known as NetamLoader is targeting government Windows 10 systems in Asia, raising alarms about its operational capabilities.
|
// AI-powered summary generated at 12:00
A roughly 2-year-old cyber-espionage campaign against Central Asian states appears to originate in Kazakhstan, researchers said.
A Windows trojan advertised on hacking forums for as little as $150 a month promises buyers access to a victim’s webcam, microphone, keystrokes and saved passwords, and comes with a set of features made to frighten the person on the other side of the screen. The malware, called KGB RAT, was analyzed...
ServiceNow has announced a new AI Passport solution and significant advances in AI governance to help ensure AI agents are production-ready by combining runtime governance, platform integration, and comprehensive oversight, all inside ServiceNow’s operational AI harness. Specifically, AI Passport is...
France-based operators of Danfoss refrigeration controllers have sharply reduced their internet exposure after the October 11 cyber-attack
CEO said the workers were hired in Q2 and are still helping today
Fake CAPTCHA checks are being used to do more than hide phishing pages. Attackers are turning the familiar “prove you’re human” step into a gateway for malware downloads, malicious browser notifications, and commands that victims are tricked into running themselves, according to Barracuda. The compa...
We're introducing new features for Proton Pass including folders, URL matching, and compromised password alerts. Find out more.
Microsoft announced that Windows Server 2022 has reached the end of mainstream support and will remain in extended support until October 2031. [...]
How Cloudflare and OpenAI are working together to help AI find useful content, keep up with changes, and make fewer wasted requests — making the experience better for users and website owners alike.
Symantec warned that Aoki can steal API keys and tokens from a number of popular AI coding assistants, including Claude and Gemini
NGINX released versions 1.30.6 and 1.31.7 on October 14 to fix five vulnerabilities, one of them present in every release since May 2005.
There are three memory bugs that F5, the company behind NGINX, says could crash a worker process or possibly let an attacker run code, and each requires a specif...
Not sure if a link is safe? Malwarebytes Scam Link Check scans suspicious links for signs of phishing, scams, malware, and other online threats before you click.
Roughly 700 French supermarkets were hit by the cyberattacks, for which no group has claimed responsibility.
The post Supermarket Refrigeration Attack Widens to Copeland, Dixell Controllers appeared first on SecurityWeek.
Platform points to Iran, Russia, and China but provides no public evidence for attribution
A critical vulnerability affecting Cisco’s Secure Email Gateway product is allowing attackers towrite arbitrary files on the underlying operating system. In an advisory issued on Wednesday, the company urged customers to apply available fixes after confirming that the flaw is...
Next.js released an out-of-band security update on October 14 that fixes two critical flaws allowing unauthenticated remote code execution, along with a high-severity denial-of-service flaw.
One code-execution flaw is in React Server Components, and the other in librsvg, the open-source library Nex...
Cisco Warns of Active Attacks Exploiting New Critical Secure Email Gateway Vulnerability Attackers are actively exploiting CVE-2026-76519 (CVSS 9.8), a critical flaw in Cisco Secure Email Gateway that lets an unauthenticated sender write files to the appliance’s operating system through a crafted em...
Drupal core has a critical flaw in its Field UI module that could let an attacker run code on the site's server, and fixes were shipped on October 14 in Drupal 11.4.10, 11.3.19, and 10.6.19.
An attacker cannot reach the flaw through core alone, the Drupal Security Team said in its advisory. Several...
See what's coming next to Proton Mail, Drive, Pass, VPN, and Lumo this autumn and winter 2026.Â
The NCSC publishes its recommendations for configuring post-quantum cryptography in TLS. Now is time to migrate.