> TODAY'S SUMMARY (75 articles)
Today's cyber news highlights several critical security threats and trends. Google now allows the use of Gmail data for targeted ads, raising privacy concerns among users. A critical vulnerability in Microsoft's .NET framework, dubbed Broccoli2Shell, has prompted emergency patching efforts. The PHP2Shell vulnerabilities are actively being exploited, with attackers successfully launching exploits against multiple hosts. Meanwhile, AI technologies are increasingly being leveraged for malicious activities, including a recent case in the Netherlands where AI-generated bank calls led to significant fraud losses. Additionally, the CISA has outlined an aggressive cyber defense strategy aimed at bolstering critical infrastructure resilience by 2030. As threats evolve, organizations must remain vigilant against both traditional and AI-assisted cyber attacks.
|
// AI-powered summary generated at 16:01
Hackers stole patients’ personal information, including names, addresses, email addresses, dates of birth, and phone numbers.
The post iRhythm Data Breach Impacts at Least 360,000 People appeared first on SecurityWeek.
Microsoft-Decision-1 is a small decision-scoring model. Given a situation, a question and a fixed set of answer options, it returns a calibrated probability for each option. “This model is designed for routing, classification, prioritization, verification, and workflow control, making it easier to i...
Investigators also sought permission to use an invasive surveillance tool called a cell-site simulators against journalist Georgia Fort and a Minnesota state Senate candidate.
If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your next to-do item.
People who buy low-cost Android phones from online marketplaces may be carrying malware that was placed on the device before it reached them, Bitdefender has found. The campaign, dubbed Midnight Mimosa, runs on budget Android devices from different brands built on MediaTek platforms. The malware shi...
Threat actors have been observed exploiting a recently disclosed critical security flaw in SonicWall Secure Mobile Access (SMA) 1000 appliances within days of public disclosure.
The vulnerability, tracked as CVE-2026-102255 (CVSS score: 10.0), is a case of pre-authenticated server-side request forg...
The suspect is believed to be Edward Dubrovsky, a Canadian cybersecurity executive who was visiting the United States for a conference.
The post Ransomware Response Expert Arrested in ShinyHunters FBI Hack Probe appeared first on SecurityWeek.
This week on The Kettle, we discuss some arrests and how Mythos' mathematical expertise has led to a second exploited bug that no human would have found
Frappes sur Yandex : les data centers au cœur de la guerre hybride, entre pannes cloud et soupçons sur les bots.
NVIDIA's new agent safety platform puts enforcement in the right place. It still must know what it is letting through.
The post Your AI agent is only as safe as the packages it downloads appeared first on CyberScoop.
The FBI has arrested a Canadian cybersecurity executive as it continues its crackdown on ShinyHunters
Three days after customers in Southeast Asia began reporting drained wallets, Ledger says the damage is limited. In its 72-hour update on X on October 11, the Paris-based hardware wallet maker said “all confirmed cases related to the disclosed draining incident of Oct 9th, 2026, involve devices sold...
CyberXero used 51 AI agents to support cyberattacks, stealing 628,000 Ukrainian records, including sensitive data from energy infrastructure. CyberXero is an operation that combines traditional hacking tools with AI agents to carry out cyberattacks. According to SOCRadar researchers, the attackers u...
Vacaf : un vendeur pirate informatique revendique 1,39 million de lignes sur des familles et des enfants.
ReliaQuest confirmed that the Qilin and Settra ransomware groups are actively exploiting a Palo Alto vulnerability patched in May
Security issues were discovered in Chromium which could result in the execution of arbitrary code, denial of service, or information disclosure. For the stable distribution (trixie), these problems have been fixed in version 155.0.8059.39-1~deb13u1.
A maximum-severity security flaw impacting the Bricksforge plugin for WordPress has come under active exploitation in the wild, according to Patchstack.
The critical vulnerability in question is CVE-2026-85097 (CVSS score: 10.0), which allows unauthenticated attackers to upload and execute arbitrar...
Data breach notifications are telling victims less than ever. What the company leaves out can still shape what you do next.
CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations.
The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek.
Daiichi Kosho says a supply chain breach has exposed personal data on over eight million karaoke customers