> TODAY'S SUMMARY (22 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Fireworks AI has reported a breach stemming from a third-party cloud hack, emphasizing the risks associated with relying on external providers. France has attributed a cyberattack that affected supermarket refrigeration systems to Iranian operatives, signaling geopolitical tensions in cyberspace. Meanwhile, CISA has warned of active exploitation of multiple security flaws in key software, including OpenSSH and IBM products. Additionally, N-able has taken its N-central Cloud offline after the disclosure of 33 zero-day vulnerabilities. On the consumer side, a data breach at Iris Ohyama may expose personal information of 7.7 million individuals. Lastly, Google has issued a security update for Chrome, addressing the eighth actively exploited zero-day this year.
|
// AI-powered summary generated at 08:00
A popular npm package called node-ipc has been compromised, with hackers publishing malicious versions that bundle credential stealing malware. The root cause of the compromise was an expired domain name that attackers managed to register in order to hijack a maintainer’s acco...
New kernel packages are available for Slackware 15.0 and -current to fix a security issue.
New dnsmasq packages are available for Slackware 15.0 and -current to fix security issues.
A newly discovered zero-day vulnerability in Microsoft Exchange Server has experts declaring an emergency and urging CSOs to think about the need to abandon on-premises email solutions.
“Because it’s already being exploited in the wild, this isn’t a ‘patch next week situati...
The commission will dole out hefty fines and promises investigations for Take It Down Act violators. Experts say questions remain around the agency’s resources and priorities. Â
The post Here’s how the FTC plans to enforce the Take It Down Act appeared first on CyberScoop.
THORChain officials said the investigation into the incident is ongoing but explained that one of their six vaults was compromised, leading to a loss of about $10.7 million.
A critical vulnerability in the Funnel Builder plugin for WordPress is being actively exploited to inject malicious JavaScript snippets into WooCommerce checkout pages. [...]
The tech company that maintains the hotel check-in system set its cloud storage to public, allowing anyone to access customers' data without a password.
L'autorité italienne de protection des données (GPDP) a émis un rappel à l'ordre ferme aux médias concernant le respect de la protection des données dans le cadre d'une affaire criminelle médiatisée.Cette intervention fait suite à la publication, sur une plateforme télévisuelle en ligne, de l'audio...
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de Framos Italia s.r.l. en liquidation, comprenant le prononcé d'une amende de 5 000 €, pour des manquements en lien avec la gestion des comptes de messagerie d'un ancien salarié et le non-respect de...
One vulnerability has been discovered in the Linux kernel that may lead to a local privilege escalation. For the oldstable distribution (bookworm), this problem has been fixed in version 6.1.172-1. We recommend that you upgrade your linux packages.
L'autorité italienne de protection des données (GPDP) a publié une décision de sanction à l'encontre de la société Io e te s.r.l.s. (comprenant le prononcé d'une amende de 2 000 €) pour des manquements en lien avec l'utilisation d'un système de vidéosurveillance dans un commerce. Cette affaire début...
Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leaks. For the stable distribution (trixie), these problems have been fixed in version 6.12.88-1.
​During the second day of Pwn2Own Berlin 2026, competitors collected $385,750 in cash awards after exploiting 15 unique zero-day vulnerabilities in multiple products, including Windows 11, Microsoft Exchange, and Red Hat Enterprise Linux for Workstations. [...]
TL;DR for busy executives The AWS AI Security Framework helps security leaders move fast and stay secure with AI. Security compounds from day 1 as workloads evolve from prototype to production to scale. Assess first. Request a no-cost SHIP engagement to baseline your posture and build a prioritized...
Hackers have injected credential-stealing malware into newly published versions of node-ipc, a popular inter-process communication package, in a new supply chain attack targeting npm. [...]
How can family subscriptions turn into a cyberthreat? What kind of phishing emails are scammers sending to subscribers? And most importantly, how do you use these services safely? We cover all this and more in this post.
The Russian state-sponsored hacking group known as
Turla
has transformed its custom backdoor Kazuar into a modular peer-to-peer (P2P) botnet that's engineered for stealth and persistent access to compromised hosts.
Turla, per the U.S. Cybersecurity and Infrastructure Security Agency...
Austrian data strategist Fritz Fahringer explains how European businesses can reclaim data sovereignty with everyday tools.
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 148.0.7778.167-1~deb12u1.