> TODAY'S SUMMARY (12 articles)
Today's cybersecurity news highlights significant threats and vulnerabilities. Alpine Linux faced an attempted remote code execution (RCE) attack, prompting a rebuild of its GitLab server. Android devices are under threat from a new "SMS of Death" vulnerability, where a hidden SMS can crash call services, including emergency calls. A critical CVSS 10.0 flaw in Canonical's LXD and MicroCloud allows attackers to impersonate trusted clients without private keys. Additionally, hackers stole around $2.7 million from Polymarket traders through a hijacked script. The FBI has linked North Korean group TraderTraitor to the record $6.43 billion Binance crypto heist, underscoring ongoing concerns around state-sponsored cybercrime.
|
// AI-powered summary generated at 16:00
When I started writing regularly about cybersecurity management in 2015, the environment looked very different.
Cloud computing was still reshaping enterprise technology. Ransomware had not become the industrialised threat it is today. Artificial intelligence was not dr...
A threat actor has been using an exploit chain combining three vulnerabilities in Ivanti’s Connect Secure (ICS) appliances to breach organizations, collect credentials, exfiltrate configuration data, and perform network reconnaissance. “In the first week of October 2026, Volexity discovered an unkno...
Microsoft issued its largest ever round of security updates in the October Patch Tuesday
A recording device wrapped in toilet paper and plugged into the back of a television in an executive conference room at OpenAI’s San Francisco office has led to the arrest of one of the company’s engineers. Abdulrahman Alfozan, a 35-year-old Saudi national who had worked at OpenAI as an engineer sin...
Since July, US frontier AI labs and other AI leaders have revealed a string of incidents in which their models accessed external computer systems without authorization, events popularly described as AI agents “going rogue.”
The most well-known and studied of these incidents...
Un ingénieur infrastructure écope de 32 mois de prison pour avoir verrouillé le réseau de son employeur avec des tâches planifiées et exigé 20 bitcoins.
Le post Il a pris son employeur en otage avec de simples tâches planifiées : 32 mois de prison a été publié sur IT-Connect.
New Chainguard research reveals larger companies struggle to patch vulnerabilities due to business priorities and operational disruption
In another record-breaking Patch Tuesday, Microsoft has squashed over 1,400 security bugs, including a Mark of the Web bypass vulnerability (CVE-2026-96951) exploited by attackers in the wild. CVE-2026-96951 is a command injection vulnerability in Windows Shell that can be triggered by remote attack...
A flaw in Linux's vhost subsystem lets a local user read and write kernel memory at will and become root across nearly a decade of kernel versions. In one virtualization setup, it lets an untrusted virtual machine write to the host's memory and hijack the program that runs the virtual machine.
The...
Mozilla has introduced Firefox Enterprise for organizations with strict compliance, governance, and security requirements.
The post Chrome, Firefox Updates Patch 114 Flaws as Mozilla Unveils Firefox Enterprise appeared first on SecurityWeek.
Critical-severity flaws could lead to authentication bypass, code execution, and sensitive authentication information leaks.
The post Citrix, Fortinet, Ivanti Patch 29 Vulnerabilities Across Their Products appeared first on SecurityWeek.
Several security issues were fixed in PyJWT.
The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild.
The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek.
Years ago I wrote diary entries about VBA code stored inside AutoCAD drawing files (.dwg).
Le RDS Windows Server ignore l'onglet Environnement de l'AD ? Voici comment lancer un programme à la connexion RDS par GPO ou via fQueryUserConfigFromDC.
Le post Windows Server – RDS : comment lancer automatiquement un programme à la connexion ? a été publié sur IT-Connect.
Several security issues were fixed in YAML-LibYAML.
Yu-Fu Fu, Seth Larson and Yonatan Magier discovered that urllib3 did not
correctly handle certain certificate validations. An attacker could
possibly use this issue to observe or modify forwarded traffic. This
issue only affected Ubuntu 26.04 LTS. (CVE-2026-97687)
Martin Desrumaux discovered that u...
It was discovered that the cURL URL transfer library, is prone to a use-after-free vulnerability when handling a HTTP/2 RST_STREAM received by a server during an upload, which could result in remote code execution. For the stable distribution (trixie), this problem has been fixed in
The bugs could allow attackers to invoke internal operations and execute code, completely compromising the system.
The post SAP Patches Critical NetWeaver, S/4HANA Vulnerabilities appeared first on SecurityWeek.
In the curl 8.23.0 release we shipped a fix for one of the worst vulnerabilities in curl in a long time. We grade it severity HIGH. It is known as CVE-2026-92392 with the title HTTP/2 upload Use-After-Free. This post explains the bug, what the problem can lead to, and something about why it happened...