> TODAY'S SUMMARY (40 articles)
Today's cybersecurity landscape highlights several critical threats and trends. Notably, the Dutch police have arrested two individuals linked to NFC relay attacks that drained over $400,000 from victims' bank accounts by tricking them into installing malicious apps. Additionally, a Quest Diagnostics breach has exposed sensitive patient records, prompting concerns about data security in healthcare. AI continues to pose challenges, with reports indicating that malicious downloads can deceive AI coding agents into executing harmful code, while advanced AI models are searching for ways to bypass restrictions. Furthermore, an ongoing campaign is exploiting stolen GitHub tokens to access private repository secrets, emphasizing the persistent risk of credential theft. Lastly, the emergence of synthetic identities has left U.S. lenders vulnerable to an estimated $2.4 billion in fraud.
|
// AI-powered summary generated at 12:01
Une vulnérabilité a été découverte dans NetApp StorageGRID. Elle permet à un attaquant de provoquer un déni de service à distance.
In August 2026, the digital health company Sharecare was the target of a ShinyHunters "pay or leak" extortion campaign. The group subsequently published data it claimed was taken from Sharecare's systems, containing 318k unique email addresses. Most of the data consisted of B2B sales and marketing r...
Momoko Shiraishi discovered that FFmpeg did not correctly handle certain
memory operations. An attacker could possibly use this issue to execute
arbitrary code. This issue only affected Ubuntu 16.04 LTS, Ubuntu 18.04
LTS, Ubuntu 20.04 LTS, Ubuntu 22.04 LTS and Ubuntu 24.04 LTS.
(CVE-2026-30754)
It...
Flock joined the CVE Program as a CNA, giving the company authority to assign IDs to vulnerabilities in its own surveillance cameras and license plate readers.
The post Flock can now issue CVEs for its own products. Should we trust it? appeared first on CyberScoop.
Amazon GuardDuty Extended Threat Detection correlates weak GuardDuty signals into a single, critical-severity attack sequence finding when their composition crosses a threshold of credibility. On May 20, 2026, the service started attaching five new indicator types to those sequences: MALICIOUS_PACKA...
A Canadian ransomware negotiator faces extortion charges in the FBI’s ShinyHunters crackdown. Here’s what is known, and what isn’t. ShinyHunters is the focus of a global FBI investigation, and the crackdown has led to the October 8 arrest of a Canadian ransomware negotiator who now faces extortion c...
Several vulnerabilities were discovered in NTFS-3G, a read-write NTFS driver for FUSE, which could result in denial of service, information leak or potentially local root privilege escalation. For the stable distribution (trixie), these problems have been fixed in version 1:2022.10.3-5+deb13u3.
It was discovered that librsvg, a library to render Scalable Vector Graphics, incorrectly parsed files with nested XML includes, which could result in denial of service or potentially the execution of arbitrary code. For the stable distribution (trixie), this problem has been fixed in
The following updated rpms for Oracle Linux 8 have been uploaded to the Unbreakable Linux Network:
Multiple security vulnerabilities were discovered in the Nagios monitoring system, which could result in cross-site request forgery, cross-site scripting or the execution of arbitrary commands. For the stable distribution (trixie), these problems have been fixed in version 4.4.6-4.1+deb13u2.
A vulnerability was discovered in the handling of delegated authentication in Keystone, the OpenStack identity service, which may result in information disclosure of privilege escalation. For the stable distribution (trixie), this problem has been fixed in version 2:27.0.0-3+deb13u6.
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
You want to set a cryptographic algorithm policy and stop non-compliant choices from being made in your Amazon Web Services (AWS) environment. This post shows you how. As you adopt post-quantum cryptography, one of the first decisions you face is which algorithms and parameter sets fit your business...
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
The following updated rpms for Oracle Linux 10 have been uploaded to the Unbreakable Linux Network:
Norway's Data Protection Authority (Datatilsynet) has fined Microsoft-owned advertising company Xandr NOK 92 million ($9.6M) for unlawfully processing and sharing sensitive data belonging to Grindr users in the country. [...]
Software supply chain attacks have grown in both frequency and sophistication. Recent high-profile compromises of build systems and open source dependencies demonstrate that attackers increasingly target the trust mechanisms that verify software integrity. Those trust mechanisms rely on digital sign...
Canonical suffered its second DDoS attack this year, disrupting public websites for over four hours while Launchpad and the Snap Store remained online. Ubuntu’s parent company Canonical spent part of last week fighting off a sustained distributed denial of service (DDoS) attack, the second one to hi...
Russian cloud services provider Yandex announced that drone attacks damaged three of its data centers, forcing it to shut down two facilities and partially disable a third. [...]