> TODAY'S SUMMARY (48 articles)
Today's cyber news highlights significant threats and trends, including a major breach at Binance, where a compromised DevOps engineer's laptop facilitated the theft of approximately $6.3 billion in cryptocurrency, possibly linked to North Korean hackers. Additionally, a hacker has leaked personal data from over 41,000 Homeland Security employees, raising serious security concerns. A critical vulnerability in Drupal's Commerce Core module is being actively exploited, prompting urgent calls for patching among online store operators. Meanwhile, a compromised version of Anthropic's Claude Code extension was discovered to have installed a persistent SSH backdoor on developers' machines. Lastly, a suspected Chinese actor has gained root access to U.S. government networks via a PHP2Shell exploit, highlighting the escalating cybersecurity risks from state-sponsored threats.
|
// AI-powered summary generated at 12:00
Access Now, Lookout and SMEX joined research forces to find a campaign involving suspected Indian government-connected group Bitter, ProSpy spyware and more.
The post Hack-for-hire spyware campaign targets journalists in Middle East, North Africa appeared first on CyberScoop.
Cybersecurity researchers have lifted the curtain on a stealthy botnet that's designed for distributed denial-of-service (DDoS)Â attacks.
Called Masjesu, the botnet has been advertised via Telegram as a DDoS-for-hire service since it first surfaced in 2023. It's capable of targeting a wide range of I...
Time and time again, we've seen police surveillance suffer from 'mission creep'âtechnology sold as a way to prevent heinous crimes ends up enforcing traffic violations, tracking protestors, and more. In our latest EFFector newsletter, we're diving into this troubling pattern and sharing all the late...
What is age verification? Learn how age verification systems, software, and age checks work, including age estimation, age filters, and privacy risks.
GDK-PixBuf could be made to crash or run programs if it opened a specially crafted file.
Several security issues were fixed in Squid.
Someone sent me a photo last week. It was me, about fifteen years ago. And I looked good. Not âgood for someone who has since surrendered to gravityâ good. Actually good. Fit. Hair that was black rather than its current negotiations with grey. My first reaction was something between pride and grief....
Several security issues were fixed in OpenSSL.
Google API key flaw exposes mobile apps to Gemini AI access, private files and billing risks
CVE-2026-34040 : une nouvelle faille de sĂ©curitĂ© importante a Ă©tĂ© dĂ©couverte dans Docker Engine. Elle permet de contourner le plugin Authz via une requĂȘte HTTP.
Le post Docker : la faille CVE-2026-34040 permet dâobtenir un accĂšs root sur lâhĂŽte ! a Ă©tĂ© publiĂ© sur IT-Connect.
New York, NY: Minimus, a provider of hardened container images and secure container images designed to reduce CVE risk, today announced the appointment of Yael Nardi as Chief Business Officer (CBO). In this newly created role, Nardi will lead the companyâs next phase of operat...
The LAPD said the breach affected âa digital storage systemâ belonging to the cityâs Attorney's Office. The World Leaks extortion gang was reported to be behind the attack.
A total of seven vulnerabilities, most of which can be exploited for DoS attacks, have been patched in OpenSSL.
The post Data Leakage Vulnerability Patched in OpenSSL appeared first on SecurityWeek.
New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues.
New mozilla-firefox packages are available for Slackware 15.0 and -current to fix security issues.
The maker of the popular open-source file encryption software VeraCrypt said Microsoft locked his online account, which may prevent device owners from booting up their computers.
Ninja Forms File Upload RCE via unauthenticated arbitrary file upload; update to 3.3.27 immediately
Eventual Consistency Eventual consistency in AWSâs Identity & Access Management (IAM) service is a well-documented phenomenon. In short, when IAM changes are made in AWS, those changes actually take a few seconds to propagate through AWSâs internal system. Within this propagation window, an atta...
Author, Creator & Presenter: Peter Girnus, Senior Threat Researcher, TrendAI & Derek Chen, Vulnerability Researcher, TrendAI
Our thanks to [un]prompted for publishing their Creators, Authors and Presenterâs outstanding [un]prompted 2026 AI Security Practitioner content on the Organizations'...
Lapsus$ relance le recrutement dâinitiĂ©s et expose une sĂ©rie de victimes entre fuite de donnĂ©es, accĂšs internes et pression informationnelle.