> TODAY'S SUMMARY (6 articles)
Today’s cybersecurity landscape highlights several key developments and threats. Michael LoSapio has been nominated to lead the Cybersecurity and Infrastructure Security Agency (CISA), a move that may encounter political challenges. SonicWall has issued urgent patches for seven vulnerabilities in its firewalls, with five allowing unauthenticated remote access—an indication of increasing risks to network security. Meanwhile, Microsoft’s email security filters are mistakenly blocking legitimate business communications, raising concerns about the reliability of automated security measures. Lastly, Anthropic's advanced bug-finding tool, Mythos, will be integrated into Cisco and IBM products, enhancing enterprise security capabilities without exposing the underlying model. Overall, these updates reflect ongoing vulnerabilities and the need for robust cybersecurity measures in both enterprise and governmental contexts.
|
// AI-powered summary generated at 04:00
The Lithuanian Prosecutor General’s Office said Friday that attackers gained unauthorized access to more than 600,000 records managed by the Centre of Registers, the state agency responsible for handling property and legal entity records.
Chinese-language phishing-as-a-service (PhaaS) communities are expanding in an area historically dominated by Russian-speaking cybercriminal groups. The Google Threat Intelligence Group (GTIG) analyzed a dozen active PhaaS offerings operating in Chinese-language underground communities and found mat...
A large-scale automated GitHub backdooring campaign was caught pushing thousands of malicious commits into public repositories while posing as routine CI/CD upkeep.
Researchers at SafeDep observed the campaign, Megalodon, touching more than five thousand repositories over a...
AI governance requires visibility into how AI tools interact with enterprise data. Varonis explains how its Atlas platform uses Claude Compliance API data to help monitor usage, investigate risk, and support compliance. [...]
Marlin AI automatically analyzes SaaS misconfigurations, investigates related activity across enterprise environments, and recommends remediation steps — while stopping short of fully autonomous corrective action.
The post AppOmni’s Marlin AI Brings Autonomous Investigation to SaaS Security appeared...
BTMOB Android RAT sold as a service with a no-code builder for fast, regional phishing lures
CWE added. Informational change only.
CWE added. Informational change only.
Detectify has unveiled the Detectify MCP (Model Context Protocol) Server, a new integration layer that brings Detectify’s security testing engines directly into AI-driven development workflows, helping coding agents find and validate exploitable vulnerabilities and interpret attack surface data with...
In the Security Updates table, added links to the Release Notes. This is an informational change only.
In the Security Updates table, added links to the Release Notes. This is an informational change only.
Several vulnerabilities have been discovered in Samba, a SMB/CIFS file, print, and login server for Unix, which might result in bypass of access checks, overwrite of files in unintended situations using the WORM vfs module, installing CA certificates over http without verification when auto-enrollme...
Information published. This CVE was addressed by updates that were released in May 2026, but the CVE was inadvertently omitted from the May 2026 Security Updates. This is an informational change only. Customers who have already installed the May 2026 updates do not need to take any further action.
A relative directory path traversal vulnerability (CVE-2026-34926) in Trend Micro’s Apex One platform has been exploited in zero-day attacks, the company confirmed. “TrendAI has observed at least one attempt to exploit this vulnerability in the wild,” Trend Micro noted, and credited the incident res...
Conifers has announced the launch of its agentic SOC, a unified AI platform designed to help security operations centers defend against cyber adversaries operating at machine speed. Built on the company’s CognitiveSOC platform, the new system connects threat intelligence, threat hunting, detection e...
Asim Viladi Oglu Manizada discovered that Samba incorrectly handled access
checks on reparse point operations. An attacker could possibly use this
issue to modify reparse point extended attributes on files that should have
been read-only. This issue only affected Ubuntu 25.10 and Ubuntu 26.04 LTS.
(...
Nimbus Manticore has continued its operations during and after the US military campaign against Iran.
The post Iranian APT Targets Aviation, Software Companies With Updated Tools appeared first on SecurityWeek.
Sur LinkedIn, de nouvelles mesures de détection ont été déployées pour limiter la visibilité des publications générées par IA. Voici ce que ça va changer.
Le post AI Slop : LinkedIn part à la chasse aux contenus IA a été publié sur IT-Connect.
We found fake installers and plugins for ChatGPT, Claude, AutoTune, and other popular software that can give attackers full control over your device.
The data breach included names, dates-of-birth, postal addresses, and Social Security numbers, according to a state government listing.