> TODAY'S SUMMARY (75 articles)
Today's cyber news highlights several critical security threats and trends. Google now allows the use of Gmail data for targeted ads, raising privacy concerns among users. A critical vulnerability in Microsoft's .NET framework, dubbed Broccoli2Shell, has prompted emergency patching efforts. The PHP2Shell vulnerabilities are actively being exploited, with attackers successfully launching exploits against multiple hosts. Meanwhile, AI technologies are increasingly being leveraged for malicious activities, including a recent case in the Netherlands where AI-generated bank calls led to significant fraud losses. Additionally, the CISA has outlined an aggressive cyber defense strategy aimed at bolstering critical infrastructure resilience by 2030. As threats evolve, organizations must remain vigilant against both traditional and AI-assisted cyber attacks.
|
// AI-powered summary generated at 16:01
Meanwhile, AI agents move robotic arms, 'make OT device operator screens lie'
U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds ProFTPD, ONLYOFFICE Docs, Strapi, Apache Struts, and ISC BIND to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added the following vulnerabilities to its Known Exploited...
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Three questions a hospital CISO should ask a healthcare fintech vendor In this Help Net Security interview, Drew McCombs, CTO and CISO at Cylerity, explains how he balances both roles. Security work is...
Australian Cyber Aware's September 2026 review highlights major cybersecurity, privacy, AI, fraud, governance, risk and compliance developments affecting Australian organisations. This edition covers significant data breaches, ransomware claims, regulatory enforcement actions, audit findings, emerg...
L'assureur péruvien Interseguro a été mentionné dans une alerte de cybersécurité émanant du groupe de ransomware Direwolf, qui prétend avoir accédé à 2,5 téraoctets de données. Interseguro a confirmé l'accès non autorisé à des informations d'un groupe de clients, incluant potentiellement des documen...
Le groupe sud-africain The Foschini Group a signalé un incident de cybersécurité affectant ses opérations au Royaume-Uni, survenu le week-end du 11 ou 12 octobre 2026. L'incident a perturbé certains systèmes informatiques des marques Phase Eight, Hobbs et Whistles. L'entreprise a engagé des spéciali...
Multiple security vulnerabilities were discovered in Tor, a connection- based low-latency anonymous communication system. For the stable distribution (trixie), this problem has been fixed in version 0.4.9.14-0+deb13u1. We recommend that you upgrade your tor packages.
Anthropic’s models kept working around the rules on the live internet. The company published the cases. Anthropic released a report on unintended actions its Claude models took during evaluations and internal use. The cases involved real websites and real organizations outside the company. Anthropic...
Canadian cybersecurity executive Edward Dubrovsky has been arrested in Pennsylvania in connection with alleged extortion activity that multiple reports have linked to the FBI's ongoing crackdown on the ShinyHunters hacking group. [...]
Silent Ransom Group allegedly extorted $207 million from 27 law firms in six months using phone calls and social engineering, not encryption. Silent Ransom Group doesn’t rely on encryption. No malware payload, no locked files, just phone calls and social engineering aimed almost entirely at law firm...
The cyberattacks that shook the South Korean financial sector earlier this month were launched by a Chinese hacker using the ARTEX AI penetration testing suite and Claude agents. [...]
Details of the case align with the investigation into ShinyHunters’ attack on FBI IT systems.
The post Canadian cybersecurity executive arrested in federal extortion case appeared first on CyberScoop.
Traditional attack surface management helps organizations discover exposed assets, but visibility alone is not enough to address threats. Criminal IP introduces AITEM, an AI-powered approach that connects exposure discovery with investigation, risk prioritization, and response. [...]
Anti-cybercrime initiatives are increasingly using AI to scam the scammers by tricking them into talking to lifelike bots that they think are real victims.
The former core infrastructure engineer deleted admin accounts, reset hundreds of passwords, and demanded 20 bitcoin to spare the company’s servers.
The post Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison appeared first on SecurityWeek.
In environments studied for the 2026 State of Agent Security Report, roughly 1,280 third-party products now embed AI. About 282 of them sit behind single sign-on. The other thousand are invisible to identity infrastructure by default, not because anyone hid them, but because an identity stack can on...
Attackers abusing rare Cyrillic and Latin letters to impersonate popular websites
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites.
The AI company said it identified four broad categories...
The Traffic Light Protocol (TLP)[1], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared further (and if so, how far).
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed. For the stable distribution (trixie), these problems have been fixed in