> TODAY'S SUMMARY (1272 articles)
Today's cybersecurity landscape highlights several critical threats and vulnerabilities. Microsoft has patched a zero-day vulnerability in Outlook (CVE-2026-124194) that is reportedly being actively exploited. Additionally, a serious vulnerability in Barracuda’s email security gateways could allow attackers root access to the devices. The ransomware attack on Vanderbilt University continues to unfold, with reports of significant data theft. Notably, Google has addressed its eighth Chrome zero-day of the year, emphasizing ongoing exploitation of browser vulnerabilities. Moreover, the rising trend of spyware targeting everyday users is alarming, with attackers increasingly infiltrating personal devices. Finally, a supply chain attack affecting Qubole has compromised sensitive customer data, further underlining the risks associated with third-party services.
|
// AI-powered summary generated at 20:00
TL;DR
Two malicious versions of the popular PyTorch Lightning package have been uploaded to PyPI following the publisher account’s compromise.
Lightning versions 2.6.2 and 2.6.3 (tracked as sonatype-2026-002817) were published on April 30, 2026, containing embedded malicious code that gat...
La société japonaise de logiciels éducatifs a annoncé qu'un accès non autorisé avait été détecté sur un serveur inactif. Cet accès a entraîné une cryptage par rançongiciel et des traces d'accès non autorisé par des tiers. L'incident, découvert grâce à l'entreprise de location de serveurs, concerne d...
Deux lieux de divertissement à Regina, The Artesian et The Exchange, ont vu leurs sites web affectés par une cyberattaque. L'incident a été signalé par Squareflo, l'entreprise locale responsable de la plateforme hébergeant ces sites. Bien que les deux venues aient subi des perturbations, elles ont i...
Categories: Threat ResearchTags: advisory, Linux, Copy Fail
Des problèmes techniques affectant ses systèmes informatiques, Foxconn a dû fermer temporairement son site de Mount Pleasant au Wisconsin après une panne réseau prolongée. Les employés ont été renvoyés et les opérations de production ont été perturbées, soulevant des questions potentielles sur un in...
La société JR Tokai Takashimaya a annoncé le 1er mai 2026 qu'elle soupçonnait un accès non autorisé à son serveur de candidature pour les emplois à temps partiel ainsi qu'une infection par un rançongiciel. À la suite de cette attaque, les noms, coordonnées et coordonnées bancaires de 1 338 employés...
Frontier AI models inspired by Anthropic’s Claude Mythos could arm attackers with advanced capabilities that the banking sector is ill equipped to cope with, Australia’s financial regulator, the Australian Prudential Regulation Authority (APRA), has warned.
In a letter addr...
Instructure, développeur de la plateforme Canvas, a annoncé avoir subi un incident de cybersécurité et mène actuellement une enquête avec l'aide d'experts externes. L'entreprise s'engage à maintenir la transparence tout en travaillant rapidement pour minimiser l'impact de cette attaque perpétrée par...
La Hochschule Emden/Leer a été victime d'une nouvelle cyberattaque le 1er mai 2026, qui a entraîné l'arrêt préventif des services informatiques centraux et la perturbation du site web. Bien que les systèmes aient été rapidement contenus sans perte de données rapportée, le fonctionnement des cours se...
For the last couple of years, we’ve watched the same predictable cycle play out across the globe: a state (or country) passes a clunky age-verification mandate, and, without fail, Virtual Private Network (VPN) usage surges as residents scramble to maintain their privacy and anonymity. We've seen thi...
Ryan Goldberg and Kevin Martin attacked five companies in 2023 and extorted nearly $1.3 million from one of their victims.
The post Former incident responders sentenced to 4 years in prison for committing ransomware attacks appeared first on CyberScoop.
Mini Shai-Hulud caught spreading credential-stealing malware
Mini Shai-Hulud caught spreading credential-stealing malware The wave of supply chain attacks aimed at security and developer tools has washed up more victims, namely SAP and Intercom npm packages, plus the lightning PyPI package.…
Unit 42 uncovers high-risk AI browser extensions. Disguised as productivity tools, they steal data, intercept prompts, and exfiltrate passwords. Protect your browser.
The post That AI Extension Helping You Write Emails? It’s Reading Them First appeared first on Unit 42.
The commission wants telecoms to do more to verify their callers and prevent illegal calls and scams from reaching Americans.
The post FCC tightens KYC rules for telecoms, closes loophole for banned foreign services appeared first on CyberScoop.
The latest House action came after the Senate declared the previous bill dead on arrival because it included a ban on the Federal Reserve’s ability to issue a digital currency. Instead, the upper chamber approved a 45-day extension by unanimous consent.
There’s a bloke on Twitter who spent three hours writing a passionate thread about AI ruining the internet. There was quite the debate, and someone asked if he’d ever used Grammarly. That’s the whole story, really. People call AI content “slop” with contempt reserved for microwaving fish at the offi...
KasadaIQ analyst commentary on the threat environment
The post Top Threats We’re Tracking in April appeared first on Security Boulevard.
It’s the second extension of Section 702 of the Foreign Intelligence Surveillance Act in 10 days, and a regular ritual for the Hill.
The post Congress kicks the can down the road on surveillance law (again) appeared first on CyberScoop.
The agency added the flaw to the KEV list days after hosting providers confirmed active, ongoing attacks.
The post cPanel’s authentication bypass bug is being exploited in the wild, CISA warns appeared first on CyberScoop.