> TODAY'S SUMMARY (15 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Microsoft reported an alarming 7.3 billion phishing emails detected in Q3 2026, indicating a surge in phishing tactics. U.S. agencies warned of attacks on industrial refrigeration systems, potentially causing severe disruptions and hazards. The CISA flagged a critical vulnerability in SonicWall SonicOS, emphasizing the urgency for organizations to address this flaw amid reports of exploitation. Additionally, hackers are logging in using stolen credentials within an average of just eight minutes post-infection. On a more positive note, open-source solutions like Wirken are emerging to mitigate risks associated with AI agents. Finally, a notable incident involves a major data breach of 22 million French motorists' data, underscoring ongoing data security challenges.
|
// AI-powered summary generated at 08:00
A developer at an AI startup wanted to cheat at Roblox. They downloaded a dodgy script on their work laptop. That one decision triggered a cascade of failures that ended with a $2 million data breach affecting hundreds of thousands of organisations. All for some free in-game currency.
Meanwhile,...
Multiple official SAP npm packages were compromised in what is believed to be a TeamPCP supply-chain attack to steal credentials and authentication tokens from developers' systems. [...]
The bill, which passed 235-191, would renew Section 702 of the Foreign Intelligence Surveillance Act for three years.
Microsoft’s editor releases continue on a monthly cadence, with the Insiders build of Visual Studio Code 1.118. The update concentrates on the Copilot CLI integration, session management in the Agents app, and an opt-in path for TypeScript 7.0. Copilot CLI gains auto model selection Two separate ent...
The Quick Page/Post Redirect plugin, installed on more than 70,000 WordPress sites, had a backdoor added five years ago that allows injecting arbitrary code into users' sites. [...]
The UN Special Rapporteur on the situation of human rights in the Palestinian territories occupied since 1967 recently announced a study addressing the killings and attacks against Palestinian journalists and media workers, the destruction of media infrastructure in Gaza, and the production and diss...
What happens when you strip the internet out of AI? Researchers built a chatbot that only knows the world before 1931.
The Justice Department said the operation began last year following “numerous” victim complaints to the FBI by U.S. victims who lost millions through cryptocurrency investment fraud schemes.
Hackers are exploiting two authentication bypass vulnerabilities in the Qinglong open-source task scheduling tool to deploy cryptominers on developers' servers. [...]
A global survey of 2,750 cybersecurity and IT professionals published this week finds that for the third consecutive year a lack of cybersecurity skills is cited as the top cause of security breaches (56%), with 51% reporting they specifically need individuals with senior-level skills. Conducted by...
Data breaches pose a serious threat to small businesses, often resulting in significant financial losses, operational downtime, and long-term trust erosion. This blog examines the real costs of cyberattacks on SMBs, including direct expenses, hidden operational impacts, and reputational damage that...
ORNL says portable detector kit can separate real GPS signals from fake ones even at equal strength GPS spoofing, which sends fake satellite-like signals, and GPS jamming, which drowns receivers in noise, are increasingly serious problems. Researchers at Oak Ridge National Laboratory in Tennessee ha...
A few months ago I was in a conversation with a CISO at a large financial institution that I’ve known and respected for years, and she said something that every CISO I know has felt but doesn’t get said nearly loudly enough. “Preston, I can justify every dollar I spend on detection. I cannot justif...
ORNL says portable detector kit can separate real GPS signals from fake ones even at equal strength
Attackers quickly exploited a critical LiteLLM flaw (CVE-2026-42208) to access and modify sensitive database data via SQL injection. Attackers rapidly exploited a critical vulnerability in LiteLLMÂ Python package, tracked as CVE-2026-42208, just days after it became public. The vulnerability, an SQL...
Generative AI brings promising innovation, transforming how individuals and organizations approach everything from customer service to content creation and more. As AI continues to expand its capabilities, organizations are increasingly focused on how they can integrate the responsible AI concepts i...
A U.S. citizen who teaches Persian poetry classes online is suddenly unable to receive payments or access funds when his account is flagged and frozen by Paypal and its subsidiary Venmo. A Muslim city councilwoman in New York City has a Venmo payment blocked because she uses the name of a Bangladesh...
A hearing of the House Homeland Security panel’s cyber subcommittee weighed whether to designate data centers as a standalone critical infrastructure sector.
The post Congress, industry ponder government posture for protecting data centers appeared first on CyberScoop.
Second try's a charm? Microsoft and the US Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are exploiting a zero-click Windows flaw that can expose sensitive information on vulnerable systems.…