> TODAY'S SUMMARY (120 articles)
Today's cybersecurity landscape reveals several significant threats and trends. German lawmakers were warned that their iPhones may have been compromised by spyware, highlighting ongoing concerns about mobile security. In a major crackdown, Google and partners dismantled a botnet of over 1.3 million infected Android TV boxes that were intentionally shipped with backdoor vulnerabilities. Meanwhile, a new AI-powered infostealer named VOLTA uses machine learning to assess the financial value of stolen personal data, indicating a shift towards more sophisticated cybercrime tactics. Additionally, the FBI has linked North Korean hackers to a $6.3 billion theft from the Binance cryptocurrency exchange, raising alarms about state-sponsored cybercrime. Lastly, a series of cyberattacks targeting supermarket refrigeration systems across Europe has caused significant food spoilage, underscoring the potential impact of cyber threats on critical infrastructure.
|
// AI-powered summary generated at 20:00
Security researchers have discovered a chilling backdoor aimed at Cisco System firewalls that exploits unpatched vulnerabilities to maintain persistence, even after patching. This means that attackers can continue to access compromised devices without re-exploiting the holes....
Explore how contextual anomaly detection secures MCP transport layers with quantum-resistant encryption. Learn to defend AI infrastructure against tool poisoning and prompt injection.
The post Contextual Anomaly Detection in Quantum-Resistant MCP Transport Layers appeared first on Security Boulevard...
Several security issues were fixed in Vim.
Xu Zewei was allegedly directed by China’s intelligence services to conduct a sweeping espionage campaign to steal data on COVID-19 research and other U.S. policy interests.
The post Chinese national extradited to US for pandemic-era Silk Typhoon attacks appeared first on CyberScoop.
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a malformed allocation length vulnerability which leads to denial of service.
The vulnerability we are disclosing in this advisory affected...
Une vulnérabilité a été découverte dans Python. Elle permet à un attaquant de provoquer un contournement de la politique de sécurité.
De multiples vulnérabilités ont été découvertes dans Spring. Certaines d'entre elles permettent à un attaquant de provoquer une élévation de privilèges, un déni de service à distance et une atteinte à la confidentialité des données.
La société Marutake Co., Ltd., grossiste en produits pharmaceutiques, a publié un troisième communiqué concernant la panne informatique causée par une attaque par ransomware résultant d'un accès non autorisé. Bien que certaines activités soient encore perturbées, l'approvisionnement en médicaments d...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a malformed allocation length vulnerability which leads to denial of service.
The vulnerability we are disclosing in this advisory affected...
An attacker sending a malformed ONVIF request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a stack buffer overflow, which leads to pre-auth remote code execution via LAN or WAN (through browser).
The vulnerability we are disclosing in...
Cherry Health, un prestataire de soins de santé basé à Grand Rapids, Michigan, traverse actuellement une panne technologique généralisée affectant son système téléphonique, soulevant des soupçons d'incident de cybersécurité. Bien que les cliniques restent ouvertes pour les rendez-vous planifiés, l'o...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a path traversal which can lead to leaking secrets.
The vulnerability we are disclosing in this advisory affected a wide range of TP-Link de...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a heap buffer overflow, which leads to remote code execution.
The vulnerability we are disclosing in this advisory affected a wide range of...
La municipalité rurale de Gimli a informé ses résidents avoir été la cible d'une cyberattaque affectant ses systèmes informatiques. L'organisation a engagé une firme de cybersécurité pour enquêter sur l'incident et déterminer l'étendue des dégâts. Actuellement, le bureau municipal est incapable de t...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a heap buffer overflow, which leads to remote code execution.
The vulnerability we are disclosing in this advisory affected a wide range of...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a heap buffer overflow, which leads to remote code execution.
The vulnerability we are disclosing in this advisory affected a wide range of...
Vérifier une fuite de données avec ZATAZ : moteurs France et monde, veille premium et risques cyber.
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes an authentication bypass vulnerability in the HTTP server implementation.
The vulnerability we are disclosing in this advisory affected a wi...
An attacker sending a malformed HTTP POST request over LAN to a TP-Link Smart camera device can trigger the vulnerability described here.
This report describes a stack buffer overflow, which leads to denial of service and may potentially lead to remote code execution.
The vulnerability we are disclo...
Avril noir pour les forums pirates : HexDex risque 10 ans de prison, DarkForums visé par une fuite de données !