> TODAY'S SUMMARY (48 articles)
Today's cyber news highlights significant threats and trends, including a major breach at Binance, where a compromised DevOps engineer's laptop facilitated the theft of approximately $6.3 billion in cryptocurrency, possibly linked to North Korean hackers. Additionally, a hacker has leaked personal data from over 41,000 Homeland Security employees, raising serious security concerns. A critical vulnerability in Drupal's Commerce Core module is being actively exploited, prompting urgent calls for patching among online store operators. Meanwhile, a compromised version of Anthropic's Claude Code extension was discovered to have installed a persistent SSH backdoor on developers' machines. Lastly, a suspected Chinese actor has gained root access to U.S. government networks via a PHP2Shell exploit, highlighting the escalating cybersecurity risks from state-sponsored threats.
|
// AI-powered summary generated at 12:00
Microsoft has suspended developer accounts used to maintain multiple high-profile open-source projects without proper notification and no way to quickly reinstate them, effectively blocking them from publishing new software builds and security patches for Windows users. [...]
A hacker transferred more than 50 bitcoin from the Bitcoin ATM operator’s wallets after stealing credentials.Â
The post $3.6 Million Stolen in Bitcoin Depot Hack appeared first on SecurityWeek.
In this Help Net Security interview, Itamar Apelblat, CEO of Token Security, walks through findings from the company’s research, which shows that 65% of agentic chatbots have never been used yet still hold live access credentials. He explains why organizations treat AI agents more like quick experim...
AI agents are executing consequential tasks autonomously, often across multiple systems and with little record of what they did or why. Asqav, a Python SDK released under the MIT license, addresses that gap by attaching a cryptographic signature to each agent action and linking entries into a hash c...
APT 3.2 a été publié par l'équipe de Debian. Cette version apporte des nouveautés pour gérer l'historique et les rollback au niveau des paquets.
Le post Debian : le nouveau APT 3.2 gère l’historique et les retours-arrière a été publié sur IT-Connect.
Attackers are abusing the notification systems of SaaS platforms like GitHub and Jira to send phishing and spam emails, Cisco Talos researchers are warning. “Because the emails are dispatched from the platform’s own infrastructure, they satisfy all standard authentication requirements (SPF, DKIM, an...
Routine use of GenAI has moved into daily operations in state and territorial government environments, placing new security risks within common workflows. A Center for Internet Security (CIS) report, Prompt Injections: The Inherent Threat to Generative AI, identifies prompt injection as a persistent...
Hackers vowed to revive its efforts against America when the time was right — demonstrating how digital warfare has become ingrained in military conflict.
The post Shaky Ceasefire Unlikely to Stop Cyberattacks From Iran-Linked Hackers for Long appeared first on SecurityWeek.
Through LinkedIn’s more than one billion business users, the Microsoft unit has access to a vast array of personally-identifiable information, including data that could identify religious and political positions. What is less clear is what LinkedIn does with all of that data....
In a previous diary [1], we looked to see how numbers were used within passwords submitted to honeypots. One of the items of interest was how dates, and more specifically years, were represented within the data and how that changed over time. It is often seen that years and seasons are used in passw...
Learn how stateless hash-based signatures like SLH-DSA protect AI model weight integrity against quantum threats in MCP environments.
The post Stateless Hash-Based Signatures for AI Model Weight Integrity appeared first on Security Boulevard.
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Netfilter;
- Network traffic control;
(CVE-2026-23060, CVE-2026-23074, CVE-2026-23111)
Several security issues were discovered in the Linux kernel.
An attacker could possibly use these to compromise the system.
This update corrects flaws in the following subsystems:
- Cryptographic API;
- Netfilter;
- Network traffic control;
(CVE-2026-23060, CVE-2026-23074, CVE-2026-23111)
A look at how Kubernetes CVE-2020-8562 allows attackers to bypass API server proxy protections using DNS rebinding
L'entreprise de gestion des déchets Saver a été victime d'une cyberattaque dans la nuit du 9 avril, entraînant la mise hors ligne de certains de ses systèmes. Bien que la collecte des déchets se poursuive, l'entreprise subit des restrictions de service, notamment une impossibilité de répondre par té...
AI is making impersonation cheap, scalable, and indistinguishable from the real thing. Most security stacks still verify accounts, not the humans behind them.
The post When AI Can Hack Anything, Identity Becomes Everything appeared first on Security Boulevard.
Le réseau local de l'Athénée Royal d'Izel a subi une cyberattaque avec chiffrement de données le jeudi 9 avril au matin. L'incident a ciblé la plateforme École en ligne, mais l'intervention rapide du service de maintenance a permis d'éviter tout vol de données personnelles. Le rétablissement complet...
Les municipalités de Vilhelmina et Dorotea, dans la région de Västerbotten, ont été touchées par des attaques par rançongiciel le 9 avril 2026. Ces attaques ont forcé les conseils municipaux à activer des protocoles de crise et à revenir à des opérations basées sur papier. Dorotea est passée en mode...
De multiples vulnérabilités ont été découvertes dans Google Chrome. Elles permettent à un attaquant de provoquer un problème de sécurité non spécifié par l'éditeur.