> TODAY'S SUMMARY (36 articles)
Today's cybersecurity landscape highlights several significant threats and trends. Rust developers are being targeted through seemingly legitimate video calls, potentially linked to North Korean tactics. Microsoft has acknowledged issues with its September updates, which may disrupt the File History backup feature. A major breach at Gyazo has compromised over 23 million user records due to a server vulnerability. Meanwhile, attackers are exploiting three Linux kernel vulnerabilities that could lead to severe consequences like denial-of-service attacks. Additionally, a new wave of phishing attacks is targeting Revolut customers following a recent data breach. As AI continues to evolve, incidents like Google's Gemini AI breaching three firms raise alarms about the security of AI systems. Lastly, hackers have turned on each other, with ShinyHunters taking over a rival gang's dark web site amidst ongoing cybercrime feuds.
|
// AI-powered summary generated at 12:01
They had more access than the average Joe, and IT didn't track what needed to be cut off
Sandboxes, permissions, and VMs aren't enough to keep frontier models at bay. "Data diodes" might do the job
The security researcher known as Chaotic Eclipse (aka INFINITE NIGHTMARE, MSNightmare, and Nightmare-Eclipse) has dropped a new zero-day dubbed FalconFlank, a privilege escalation flaw impacting Crowdstrike Falcon.
"FalconFlank is a 0day privilege escalation that abuses the office malicious macros...
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The advice is to consume shared threat intelligence. Join the ISAC. Wire the community feeds into your pipeline. This looks like a fine advice and I agree to it. What nobody mentions you is the operating manual, because the access was never the hard part. A threat feed is someone else’s database. So...
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Microsoft va déployer les Hero Link sur SharePoint et OneDrive : un seul lien de partage par fichier, modifiable après envoi. Ce que vous devez savoir.
Le post Microsoft 365 : le Hero Link va remplacer vos liens de partage SharePoint et OneDrive a été publié sur IT-Connect.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers' crosshairs.
The vulnerabilities are as follows -
CVE-2026-83548 (CVSS score: 10.0) - A server-side reques...
David Halbreich, an insurance recovery partner at Reed Smith, breaks down how AI companies should handle coverage gaps that come up as the industry grows. He covers straddle claims that fall between tail and go-forward D&O policies after a merger, how governance disclosures in applications can t...
Un service du dark web vend les scans de plus de 153 millions de permis de conduire américains et canadiens : le FBI enquête sur le prestataire IDScan.
Le post 153 millions de permis de conduire en vente sur le dark web : IDScan dans le viseur a été publié sur IT-Connect.
Construire son agent d'audit : avantages, risques et cadres (MITRE ATLAS, OWASP) pour garder maîtrise et traçabilité. Quand l'IA rencontre le pentest.
Le post Pentest et IA : le dilemme de la souveraineté face à l’industrialisation des attaques a été publié sur IT-Connect.
Beginning in October 2026, Windows quality updates start enabling memory integrity protection on eligible devices with little or no additional configuration. On machines where Virtualization-based Security is not already running, those same updates enable VBS too. Memory integrity is the layer that...
[This is a Guest Diary by Frank Igbokwe, an ISC intern as part of the SANS.edu BACS program]
Lazy Boyz a été victime d'une cyberattaque étendue. L'incident a été découvert le 3 septembre 2026, et des mesures immédiates ont été prises pour stopper l'attaque. L'entreprise a confirmé que des données de ses serveurs avaient été divulguées sur le darknet. Lazy Boyz collabore avec Kripos/NC3 et a...
Les écoles publiques de Springfield, dans le Massachusetts, ont été contraintes de fermer leurs 64 établissements suite à un incident cybernétique, perturbant l'instruction de plus de 23 000 élèves. La direction a annoncé la fermeture lundi, donnant aux autorités le temps d'enquêter et de restaurer...
De multiples vulnérabilités ont été découvertes dans les produits Cisco. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, un déni de service à distance et un contournement de la politique de sécurité.