> TODAY'S SUMMARY (45 articles)
Recent cyber threats show a significant rise in supply chain attacks, with attackers exploiting GitHub issues to compromise 61 public repositories in under an hour. Impersonation tactics are increasingly used to extract sensitive credentials from organizations, targeting major AI firms like OpenAI and Meta. Cisco is facing challenges with multiple zero-day vulnerabilities in its firewall software, leading to remote crashes and exploitation for malware deployment. Online scams have surged, overtaking phishing attempts, while significant data breaches, including the theft of 2.6 million records from Sony’s ISP, highlight the ongoing risks to personal information. Additionally, hacktivist groups are leaking sensitive government employee data, emphasizing the need for robust data protection measures.
|
// AI-powered summary generated at 12:01
Iran-linked hacking groups are turning to high-volume, low-impact cyberattacks, and AI is providing a boost.
The post Hacked Hospitals, Hidden Spyware: Iran Conflict Shows How Digital Fight Is Ingrained in Warfare appeared first on SecurityWeek.
A thoughtful review of Apple’s system to alert users that the camera is on. It’s really well-designed, and important in a world where malware could surreptitiously start recording.
The reason it’s tempting to think that a dedicated camera indicator light is more secure than an on-display indicator i...
CISA Flags Critical PTC Vulnerability That Had German Police Mobilized A critical remote code execution flaw in PTC Windchill and FlexPLM, CVE-2026-4681, is drawing unusual urgency. PTC has published mitigations and indicators of compromise, and CISA warned that the bug could let an unauthenticated...
F5 has reclassified a BIG-IP APM denial-of-service (DoS) vulnerability as a critical-severity remote code execution (RCE) flaw, warning that attackers are exploiting it to deploy webshells on unpatched devices. [...]
Two malicious versions of the popular SDK were uploaded to the PyPI registry, targeting Windows, macOS, and Linux.
The post Telnyx Targeted in Growing TeamPCP Supply Chain Attack appeared first on SecurityWeek.
Google introduced a suite of location privacy features in Android 17 Beta 3 to give users more control and provide developers with tools for data minimization and product safety. Location button overview Android 17 introduces a new UI element called the location button, designed for one-time access...
Researchers from watchTowr and Defused have found evidence that attackers are actively exploiting CVE-2026-3055, a critical NetScaler vulnerability
Attackers are exploiting a critical Fortinet FortiClient EMS flaw (CVE-2026-21643) that allows remote code execution via SQL injection. A critical Fortinet FortiClient EMS vulnerability, tracked as CVE-2026-21643 (CVSS score of 9.1), is now being actively exploited. Defused researchers warn that thr...
SAN FRANCISCO — Enterprises rushing to deploy AI in their operations are opening a security exposure most of their existing tools were never designed to address. That’s the hard message coming out of RSAC 2026 — and it’s one worth … (more…)
The post FIRESIDE CHAT: AI gives rise to a semantic attack...
Brussels notifying 'Union entities' whose data may've been snatched in websites breach The European Commission has admitted that attackers broke into its public-facing web infrastructure and siphoned off data in a bare-bones disclosure that answers the what but ducks most of the how.…
As we're always wanting to keep ahead in the security game, I'm happy to announce that we now support Passkeys on Report URI! Let's take a quick look at what Passkeys are, why you should use them, and how we've implemented them.
It was discovered that ImageMagick did not properly process certain tags
prior to an image being loaded. An attacker could possibly use this issue
to cause ImageMagick to crash, resulting in a denial of service.
(CVE-2026-23952)
It was discovered that ImageMagick did not properly handle temporary f...
Recent breaches suggest attackers are shifting beyond traditional endpoints to target application programming interfaces (APIs). But typical perimeter protections can completely miss this vector.
“We used to talk about defense-in-depth and endpoint protection,” says Sean Mu...
BelkaGPT in Belkasoft X helps investigators review massive image sets faster with offline AI-powered classification, image descriptions, natural language search, and facial recognition.
Cybersecurity researchers have discovered a remote access toolkit of Russian-origin that's distributed via malicious Windows shortcut (LNK) files that are disguised as private key folders.
The CTRL toolkit, according to Censys, is custom-built using .NET and includes various executables" to facilita...
Charity is built on trust, but scammers often misuse this goodwill to run fake donation campaigns. These schemes are designed to exploit emotions, especially during crises, natural disasters, or urgent causes. Understanding how charity fraud works and checking donation requests carefully can help pr...
Microsoft has pulled a buggy Windows 11 non-security preview update to investigate a known issue that triggers 0x80073712 errors during installation. [...]
The UK Information Commissioner’s Office has handed a £100,000 fine to Birmingham-based TMAC
The critical-severity flaw leaks application memory and can be exploited to obtain authenticated administrative session IDs.
The post Exploitation of Fresh Citrix NetScaler Vulnerability Begins appeared first on SecurityWeek.
In my years securing cloud-native environments, I’ve noticed a recurring blind spot. We obsess over the “front doors” such as exposed dashboards, misconfigured RBAC, or unpatched container vulnerabilities. We harden the perimeter, but we often ignore the machinery humming insi...