> TODAY'S SUMMARY (12 articles)
Today's cybersecurity news highlights significant threats and vulnerabilities. Alpine Linux faced an attempted remote code execution (RCE) attack, prompting a rebuild of its GitLab server. Android devices are under threat from a new "SMS of Death" vulnerability, where a hidden SMS can crash call services, including emergency calls. A critical CVSS 10.0 flaw in Canonical's LXD and MicroCloud allows attackers to impersonate trusted clients without private keys. Additionally, hackers stole around $2.7 million from Polymarket traders through a hijacked script. The FBI has linked North Korean group TraderTraitor to the record $6.43 billion Binance crypto heist, underscoring ongoing concerns around state-sponsored cybercrime.
|
// AI-powered summary generated at 16:00
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the oldstable distribution (bookworm), these problems have been fixed in version 147.0.7727.101-1~deb12u1.
The malware is configured to operate on systems associated with Israeli water treatment and desalination plants.
The post ZionSiphon Malware Targets ICS in Water Facilities appeared first on SecurityWeek.
Josh Eads, Kristoffer Janke, Eduardo Vela Nava, Tavis Ormandy, and Matteo
Rizzo discovered that some AMD Zen processors did not properly verify the
signature of CPU microcode. This flaw is known as EntrySign. A privileged
attacker could possibly use this issue to cause load malicious CPU
microcode c...
Un quart de siècle après son apparition, Windows Active Directory (AD) définit toujours les réseaux sur site. Mais il faut l’admettre : AD est un système d’identité vieillissant. Il a été conçu pour une époque plus simple, où la sécurité ne signifiait qu’une chose : un réseau interne sûr et un monde...
Information published.
Information published.
Microsoft warns that some Windows domain controllers are entering restart loops after installing the April 2026 security updates. [...]
Information published.
Information published.
This DHL-themed email tries to get recipients to install remote access software attackers can use to deploy further malware, including ransomware.
Information published.
Information published.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a flaw in Apache ActiveMQ, tracked as CVE-2026-34197 (CVSS score of 8.8), to its Known...
Information published.
Information published.
An indirect prompt injection could be chained with a sandbox bypass and Cursor’s remote tunnel feature for shell access to machines.
The post Cursor AI Vulnerability Exposed Developer Devices appeared first on SecurityWeek.
Information published.
Information published.
The National Institute of Standards and Technology (NIST) has announced changes to the way it handles cybersecurity vulnerabilities and exposures (CVEs) listed in its National Vulnerability Database (NVD), stating it will only enrich those that fulfil certain conditions owing to an explosion in CVE...