> TODAY'S SUMMARY (54 articles)
Today's cybersecurity news highlights several key threats and trends. Vanderbilt University has experienced a ransomware attack, reportedly by the BYOD group, compromising sensitive data. The Russian state-sponsored Turla group is utilizing a new malware toolset named "Cereal" to infiltrate Microsoft Exchange servers of government entities in Kazakhstan and Romania, showcasing escalating cyber-espionage tactics. Google has issued its eighth zero-day patch for Chrome this year, addressing a vulnerability actively exploited in the wild. Meanwhile, Apple and SAP have released important security updates to fix critical flaws in their software. Finally, spyware attacks are increasingly targeting a broader range of individuals, emphasizing the need for enhanced vigilance and protection measures.
|
// AI-powered summary generated at 12:00
It was discovered that libpng incorrectly handled memory when processing
certain PNG files. If a user or automated system were tricked into opening
a specially crafted PNG file, an attacker could use this issue to cause
libpng to crash, resulting in a denial of service, or possibly execute
arbitrary...
Palo Alto Networks has disclosed that threat actors may have attempted to unsuccessfully exploit a recently disclosed critical security flaw as early as April 9, 2026.
The vulnerability in question is CVE-2026-0300 (CVSS score: 9.3/8.7), a buffer overflow vulnerability in the User-ID Authentication...
Several security issues were fixed in NASM.
It was discovered that Little CMS incorrectly handled certain malformed ICC
profiles. An attacker could possibly use this issue to cause Little CMS to
crash, resulting in a denial of service.
The software developer has identified the impacted systems, removed potentially compromised files, and validated installation packages.
The post Vendor Says Daemon Tools Supply Chain Attack Contained appeared first on SecurityWeek.
OWSLib could be made to expose sensitive information.
Yashashree Gund discovered that the dpkg dpkg-deb tool incorrectly handled
certain zstd-compressed .deb archives. If a user or automated system were
tricked into manipulating a specially crafted .deb archive, a remote
attacker could possibly use this issue to cause dpkg-deb to stop
responding, resul...
Sophos finds fake Claude site spreading DonutLoader and a new Beagle backdoor via DLL sideloading
Daisy Chen discovered that NASM was vulnerable to a heap buffer overflow
when handling certain input. An attacker could possibly use this issue
to cause NASM to crash, resulting in a denial of service, or
possibly execute arbitrary code. (CVE-2023-31722)
It was discovered that NASM incorrectly hand...
When a critical Linux kernel privilege escalation was publicly disclosed, Cloudflare's security and engineering teams detected, investigated, and mitigated the threat across our global fleet, confirming zero customer impact and no malicious exploitation.
“TrustFall” attack shows how AI coding agents can be manipulated into launching stealthy supply chain compromises.
The post AI Coding Agents Could Fuel Next Supply Chain Crisis appeared first on SecurityWeek.
Developers clone unfamiliar repositories all the time. Open-source projects, work from teammates, sample code from a tutorial, a library someone recommended on a forum. The convention is old and reasonable: you look at what’s inside before you run it. AI coding assistants that work from the command...
Si and Desi discuss a range of digital forensics topics, from writing forensic reports that juries can actually understand, to whether AI is coming for “button pusher” DFIR jobs.
The agency did not publicly attribute the incidents to a specific group or country but said Poland faced intensified hostile cyber activity in 2024 and 2025, “with particular emphasis on the special services of the Russian Federation.”
A 20-year-old California man was sentenced to 78 months in prison for serving as a home invader and money launderer in a criminal ring that stole over $250 million in cryptocurrency. [...]
Enterprises migrating between SIEM platforms often have to manually rewrite detection rules because vendors such as Splunk, Microsoft Sentinel, IBM QRadar, and Google Chronicle use different query languages and data models.
Researchers now say AI may be able to automate muc...
From service accounts to AI-driven processes, identity is evolving faster than most security programs can adapt. Discover strategies for reducing risk and regaining control.
The post Webinar Today: Securing Identity Across Humans, Machines and AI appeared first on SecurityWeek.
Modern attacks don't stop at initial compromise. This webinar explores why security and recovery must work together to reduce downtime and improve resilience. [...]
Several security issues were fixed in the Linux kernel.
It was discovered that OWSLib did not properly disable entity resolution
within its XML parser. An attacker could possibly use this issue to read
arbitrary files via a crafted XML payload.