> TODAY'S SUMMARY (130 articles)
Today's cybersecurity news highlights several significant threats and vulnerabilities. DreamHost has mandated password resets for users following a disruption linked to an ongoing incident. A widespread attack has seen 953 online stores, predominantly on Magento, infected with malware that evades detection. Critical vulnerabilities in the Brotli compression library have prompted emergency patches from Microsoft, PHP, and others, as exploits are actively being leveraged. Additionally, researchers have revealed a new Android spyware platform, uCreator, which stealthily targets popular messaging apps. Meanwhile, the U.S. government faces scrutiny over its handling of surveillance laws, and malicious actors are increasingly using social engineering tactics via Microsoft Teams to deploy malware.
|
// AI-powered summary generated at 20:01
Attackers abusing rare Cyrillic and Latin letters to impersonate popular websites
Anthropic on Friday said it's cutting off live internet access for all its internal evaluations following the discovery of new incidents in which its artificial intelligence (AI) models exhibited misaligned behavior and targeted real websites.
The AI company said it identified four broad categories...
The Traffic Light Protocol (TLP)[1], which is now in its second incarnation, is a wonderful standard that enables one to easily communicate whether information may be shared further (and if so, how far).
Multiple security issues were discovered in Ghostscript, the GPL PostScript/PDF interpreter, which could result in denial of service and potentially the execution of arbitrary code if malformed document files are processed. For the stable distribution (trixie), these problems have been fixed in
Empire Market co-creator Raheim Hamilton was sentenced to 40 years in prison for running a dark web marketplace linked to $430 million in illegal trades. The case against Empire Market shows how a dark web marketplace can become a major criminal business, bringing together drug trafficking, stolen c...
Raheim Hamilton, 30, pleaded guilty earlier this year to a drug conspiracy charge and agreed to forfeit more than $100 million worth of Bitcoin and several properties in Virginia.
Agents with the Federal Bureau of Investigation (FBI) on Thursday arrested the co-founder of a Canadian cybersecurity firm in connection with an investigation into the ShinyHunters hacking group that recently relieved the FBI of sensitive data on thousands of agents, multiple sources tell KrebsOnSec...
Un incident présumé a perturbé les paiements de factures de services publics via CUSI (Continental Utility Solutions Inc.), une société basée en Arkansas. L'incident, qui a débuté le 10 octobre 2026, a bloqué l'accès aux comptes et forcé les clients dans plusieurs États (Texas, Illinois, Californie,...
Les Seetelhotels, situés sur Usedom, ont été victimes d'une cyberattaque par ransomware. L'incident a été détecté le week-end du 10 octobre 2026 et le système a été immédiatement isolé. Une enquête forensique est actuellement menée pour déterminer l'étendue de l'attaque et si des données personnelle...
New mutt packages are available for Slackware 15.0 and -current to fix security issues.
Une cyberattaque a été confirmée contre le centre de commandement des pompiers de Wolsfeld (Eifelkreis Bitburg-Prüm). Les hackers ont réussi à accéder à plusieurs ordinateurs. L'incident a été découvert lorsqu'un responsable a reçu une notification de serveur hors ligne. Les équipements affectés ont...
In the past two years, the federal government has unlawfully consolidated data exposing our private information.Â
This consolidation has been chaotic but generally came in three rolling waves: It started with DOGE, moved to agency-to-agency data sharing with ICE, and then attempted data-driven purge...
The ChatGPT maker said the researchers "violated clear policies on handling sensitive information.”
The post OpenAI Fires 3 Safety Researchers in Dispute Over AI Risks appeared first on SecurityWeek.
Hackers are abusing legitimate Bing search-result redirects as click URLs in Google search ads to direct users to fake Claude installers that deliver ClickFix attacks. [...]
On Wednesday I spent a day fishing, on a small boat out of Gloucester, MA. We caught many cod (none of which we could keep), and a bunch of hake and mackerel (all of which we could keep). And…I caught a squid! Near as I can tell, it’s a longfin squid, sometimes called a Boston squid (Doryteuthis (Am...
Tokens transmitted in metadata, weak VM isolation, and expansive permissions make hacking a lot easier
Cybersecurity researchers have disclosed details of an ongoing credential-theft campaign that has compromised two high-profile open-source maintainer accounts to push a malicious workflow into over 340 repositories.
"Using the account of Takashi Kitao, author of the 18,400-star game engine pyxel, t...
Japan helped extradite a Russian suspect linked to Qilin ransomware to Germany, but the gang continued attacking victims after his arrest. Germany has arrested a Russian national believed to be a leading figure in the Qilin ransomware group, and Japan’s National Police Agency just put its own role i...
Japan’s National Police Agency confirmed the arrest and extradition to Germany of a Russian national accused of being involved in the Qilin ransomware gang.
The following updated rpms for have been uploaded to the Unbreakable Linux Network: