> TODAY'S SUMMARY (103 articles)
Today's cybersecurity landscape reveals several key threats and trends. Small and medium-sized businesses (SMBs) continue to face significant risks of client data leaks due to common oversights, such as password reuse. A jailbroken AI agent has executed a two-week attack on a European telecom, highlighting the evolving nature of AI-assisted cyber threats. Notably, a recent supply chain attack compromised tens of thousands of GitHub repositories, showcasing vulnerabilities in software development ecosystems. Additionally, hackers are exploiting vulnerabilities in refrigeration controllers and NAS devices, leading to potential service disruptions and data breaches. In a concerning trend, deepfake technology is being utilized in scams, with three individuals indicted for using AI to impersonate CEOs and defraud companies out of $129 million.
|
// AI-powered summary generated at 16:00
Fortinet, Ivanti, and SAP have released security updates to address multiple critical security vulnerabilities that could result in arbitrary code execution and information disclosure.
The security flaw patched by Fortinet relates to a command injection vulnerability in FortiSandbox, FortiSandbox C...
The JDY botnet, a malware network previously associated with Chinese threat actors like Volt Typhoon, has significantly expanded its targeting scope and reconnaissance efforts. [...]
A high-severity unpatched security flaw in Langflow, an open-source low-code platform to build artificial intelligence (AI) applications, has come under active exploitation in the wild, according to findings from VulnCheck.
The vulnerability in question is CVE-2026-5027 (CVSS score: 8.8), a case of...
Read the latest DFIR news – SANS’ AI framework for DFIR, psychological risks for analysts, AI-generated CSAM in U.S. courts, Perceptor’s open-source investigation platform, and more.
June’s Patch Tuesday security updates have arrived, with SAP fixing four critical vulnerabilities and Microsoft addressing over 200 CVEs. Microsoft’s to-do list includes fixes for three zero days, 32 patches rated as ‘critical’, and a batch of other high-risk vulnerabilities t...
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation.
The list of vulnerabilities is as follows -
CVE-2026-20245 (CVSS score: 7.8) - An improper...
For a growing number of victims, identity theft no longer ends with a fraudulent charge or a compromised account. More than one in four people who contacted the Identity Theft Resource Center during the reporting period were dealing with multiple identity-related incidents, according to the organiza...
Football et mots de passe : découvrez pourquoi les noms de joueurs et clubs facilitent le guessing et comment prévenir ce risque dans l'Active Directory.
Le post Coupe du Monde 2026 & mots de passe thématiques : vos utilisateurs sont-ils hors-jeu ? a été publié sur IT-Connect.
Join Cellebrite live on 17 June to see Genesis in action — agentic AI built to help investigators cut through digital evidence overload and surface leads faster.
ServiceNow is used by thousands of enterprises to automate their internal processes, but says several customers had data accessed because of a security bug.
KB5094126 et KB5093998 : voici les deux nouvelles mises à jour de juin 2026 publiées par Microsoft pour les machines sous Windows 11 24H2, 25H2 et 23H2.
Le post Windows 11 KB5094126 : beaucoup de nouveautés avec la mise à jour de juin 2026 a été publié sur IT-Connect.
Mardi 9 juin 2026, la mise à jour ESU de juin 2026 pour Windows 10 a été publiée par Microsoft : KB5094127. Voici les nouveautés de cette mise à jour.
Le post Windows 10 KB5094127 : le point sur la mise à jour ESU de juin 2026 a été publié sur IT-Connect.
Attackers are increasingly bypassing weak authentication through phishing, MFA fatigue, and service desk social engineering. Specops Software breaks down five best practices for stronger identity verification and access security. [...]
A cybercrime group known as The Gentlemen has emerged as the second most active ransomware gang by victim count, rapidly attracting a talented pool of hackers through an aggressive recruitment strategy that promises affiliates 90 percent of any ransom paid by victims. This post examines clues pointi...
As attackers increasingly favor stolen credentials over exploits, infostealers have become a primary source of access for ransomware and other cybercrime operations.
The post Infostealers Turn Millions of Devices Into Credential Theft Machines appeared first on SecurityWeek.
The ACLU is suing two Florida police departments over the arrest of a Fort Myers man in a child-abduction case, saying officers treated a flawed face-recognition match as a near-certain ID.
Updated an acknowledgement. This is an informational change only.
It was discovered that HTTP-Daemon incorrectly handled untrusted input
under certain circumstances. A remote attacker could possibly use this
issue to execute arbitrary commands, create or overwrite arbitrary files,
or expose sensitive information.
Cyera is positioned as one of the most valuable privately held cybersecurity firms in the world with total funding topping $2 billion.
The post Cyera Raises $600 Million at $12 Billion Valuation appeared first on SecurityWeek.
Microsoft has patched an actively exploited Exchange Server vulnerability that allows threat actors to execute arbitrary JavaScript code in cross-site scripting (XSS) attacks targeting Outlook Web Access users. [...]