> TODAY'S SUMMARY (11 articles)
This week's cybersecurity updates highlight several key threats and trends. A vulnerability in the abandoned updater for Popcorn Time (CVE-2026-30612) has been neutralized after potentially exposing millions of PCs to SYSTEM-level code execution. The rise of AI in open-source projects has introduced concerns, with a survey indicating that maintainers are overwhelmed by low-quality AI contributions, leading to an r/opensource ban on AI projects. Additionally, forgotten AI agents pose risks by retaining access to sensitive company data, with 76% of them still holding credentials. Fraud involving synthetic identities has surged, exposing U.S. lenders to $2.4 billion in losses. Meanwhile, efforts to secure DNS against quantum decryption attacks are accelerating, reflecting an ongoing commitment to future-proofing cybersecurity measures.
|
// AI-powered summary generated at 08:00
Attackers took remote control of fridges and freezers at hundreds of French supermarkets on the night of October 11 and warmed them, forcing stores to throw food away, several retail chains said.
The attackers reached them through the controller that runs all of a store's fridges and freezers, a de...
Two of 31 newly disclosed flaws in Progress Software's MarkLogic Server database could let an account given only some management privileges take administrator control of the server, the company says.
Progress published all 31 on October 12 and scored five of them critical. Fixes have been available...
A cyberattack targeted refrigeration controllers, setting refrigerators and freezers across hundreds of supermarkets to defrost.
The post Refrigeration Controller Hack Spoils Food Across European Supermarkets appeared first on SecurityWeek.
GitLab has released patches for a maximum-severity security flaw impacting its Community Edition (CE) and Enterprise Edition (EE) software that could result in arbitrary code execution.
"GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to exe...
The hacker behind a high-profile string of leaks involving the upcoming release of the Grand Theft Auto (GTA) 6 videogame has threatened to release a complete, playable build.
Read more in my article on the Hot for Security blog.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Agent Standup transforme vos sessions Claude Code, Codex et Mistral Vibe en appel visio animé, avec partage d'écran et replay. Gratuit, open source et local.
Le post Agent Standup : vos agents Claude Code et Codex réunis dans un appel visio pour suivre vos sessions a été publié sur IT-Connect.
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Hackers hit French supermarkets via unpatched Danfoss refrigeration systems, remote-heating freezers and destroying stock worth millions. Overnight from Sunday to Monday, a large cyberattack hit the refrigeration systems of hundreds of French supermarkets, BFMTV revealed. The attackers targeted equi...
The following updated rpms for Oracle Linux 9 have been uploaded to the Unbreakable Linux Network:
Every reply tells scammers your number is active, which makes it worth more on the dark web and a better target for fraud.
Mozilla lance Firefox Enterprise : une console de gestion hébergée chez vous, du DLP intégré et des contrôles sur l'IA pour gérer Firefox à l'échelle d'un parc.
Le post Mozilla dévoile Firefox Enterprise : une console on-premise pour piloter le navigateur sur vos PC a été publié sur IT-Connect.
It's 2026 and Virtzilla reckons it's OK to pay for MFA
CVSSv3 Score:
5.3
An improper neutralization of special elements used in an OS command ('OS Command Injection') vulnerability [CWE-78] in FortiManager fgfmd daemon may allow a remote attacker impersonating a fortimanager cluster node to execute unauthorized code or commands via specially...
CVSSv3 Score:
7.7
An improper neutralization of special elements used in an SQL Command ("SQL Injection") vulnerability [CWE-89] in FortiMail webmail may allow an authenticated attacker to execute unauthorized code or commands via specifically crafted HTTP requests.
Revised on 2026-...
WhatsApp déploie l'envoi programmé de messages auprès de bêta-testeurs Android : jusqu'à deux semaines à l'avance, en privé comme dans les groupes.
Le post WhatsApp : la programmation des messages arrive en bêta sur Android a été publié sur IT-Connect.
CVSSv3 Score:
4.8
An Uncaught Exception vulnerability [CWE-248] in FortiSandbox may allow a privileged attacker to deny access to the GUI and CLI persistently via crafted HTTP requests.
Revised on 2026-10-13 00:00:00
CVSSv3 Score:
7.9
An Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability [CWE-89] in FortiAnalyzer, FortiManager, FortiManager Cloud and FortiAnalyzer Cloud may allow a low privileged user to execute arbitrary commands via crafted requests....