> TODAY'S SUMMARY (130 articles)
Today's cyber news highlights several significant threats and trends. The largest cryptocurrency heist in history occurred as North Korean hackers stole approximately $6.3 billion from Binance by exploiting a compromised DevOps laptop. In retail, fashion retailer Resolve reported the theft of customer payment card information due to a security breach. Additionally, a malicious update to the Claude Code extension for VS Code was found to have installed persistent SSH backdoors on developers' machines. Exploits targeting critical vulnerabilities in Drupal and GitLab are actively being leveraged by attackers, raising concerns about web security. Lastly, hackers published sensitive data of over 41,000 DHS employees, emphasizing the ongoing risks to government cybersecurity.
|
// AI-powered summary generated at 20:00
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Dutch fitness giant Basic-Fit announced that hackers breached its systems and gained access to information belonging to a million of its customers. [...]
Two reports from former high-level U.S. cyber officials and the UK government’s top AI research institution reveal how top defenders think about the tool’s hacking capabilities.
The post Here’s how cyber heavyweights in the US and UK are dealing with Claude Mythos appeared first on CyberScoop.
One was patched almost 14 years ago Crooks are exploiting four Microsoft vulnerabilities - one patched 14 years ago and another tied to ransomware activity - according to America's lead cyber-defense agency, which on Monday gave federal agencies two weeks to patch them.…
Several security issues were fixed in the Linux kernel.
Several security issues were fixed in the Linux kernel.
What Makes Non-Human Identities Crucial in a Complex Cloud Environment? One might wonder how organizations can secure their digital assets effectively. The answer lies in a robust Non-Human Identity (NHI) management system. NHIs serve as a cornerstone in safeguarding cloud infrastructure by addressi...
Several security issues were fixed in the Linux kernel.
How Significant is Non-Human Identity Management in SOC Operations? Have you ever wondered how the management of non-human identities (NHIs) impacts the efficacy of Security Operations Centers (SOC)? With cybersecurity professionals strive to maintain a robust defense, effectively managing NHIs beco...
What Role Do Non-Human Identities Play in Cybersecurity? Securing digital environments often brings to mind defending against human threats, but what about machine identities? Known as Non-Human Identities (NHIs), these are crucial elements that are becoming increasingly relevant in cybersecurity fr...
It was discovered that incorrect parsing of policy rules in the xdg-dbus-proxy (a filtering proxy for D-Bus connections) allowed the bypass of eavesdrop restrictions, which could result in information disclosure. For the stable distribution (trixie), this problem has been fixed in
Are Non-Human Identities the Weak Link in Your Security Infrastructure? Where digital transformation impacts every sector, the management of Non-Human Identities (NHIs) represents a burgeoning area of concern for cybersecurity professionals. Organizations are increasingly relying on machine identiti...
As retail and hospitality security leaders gather in Austin, TX for the 2026 RH-ISAC Cybersecurity Summit, one inconvenient reality is coming into focus: the fraud gap is widening with automated attacks and human-driven abuse.
The post Where Retail and Hospitality Fraud is Actually Happening Now (an...
The company said a developer tool automatically retrieved a malicious version of the popular open-source library, but insists the integrity of its systems and software were not impacted.
The post OpenAI’s Mac apps needs an update thanks to the Axios hack appeared first on CyberScoop.
Despite a social media ban implemented in December, new research found that most Australian children between the ages of 12 and 15 can still access their accounts on social media platforms.
TL;DR This week's Attack of the Day posts revealed a clear shift from volume to precision. A phishing PDF auto-launched a credential harvest page the instant it opened, no click required. A QR code inside another PDF had the target's email address pre-encoded in base64, so the landing page...
Rockstar Games has suffered a data breach linked to a recent security incident at Anodot, with the ShinyHunters extortion gang now leaking the stolen data on its data leak site. [...]
A critical vulnerability in the wolfSSL SSL/TLS library can weaken security via improper verification of the hash algorithm or its size when checking Elliptic Curve Digital Signature Algorithm (ECDSA) signatures. [...]
Protecting privacy and free speech online takes more than policy work—it takes community. Conferences like HOPE are where that community comes together to learn, connect, and push these ideals forward. That's why EFF is proud to be at HOPE 26.
Join us at this year's Hackers On Planet Earth, August 1...
Hackers accessed some Booking.com user data, including names, emails, phone numbers, and booking details. The issue is now contained. Booking.com warned that hackers may have accessed customer data linked to travel reservations. Exposed details could include names, email addresses, phone numbers, an...